QLWD/code_shield huggingface dataset:
标题: Bitweaver 1.x - '/wiki/orphan_pages.php?sort_mode' SQL Injection EDB-ID: 28964 CVE: 2006-6924 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20996/info
   
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
   
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
   
http://www.example.com/bitweaver/wiki/orphan_pages.php?sort_mode=-98 URL: https://www.exploit-db.com/exploits/28964
标题: Bitweaver 1.x - '/wiki/list_pages.php?sort_mode' SQL Injection EDB-ID: 28965 CVE: 2006-6924 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20996/info
    
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
    
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
    
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
    
http://www.example.com/bitweaver/wiki/list_pages.php?find=&sort_mode=-98 URL: https://www.exploit-db.com/exploits/28965
标题: ExoPHPDesk 1.2 - 'Pipe.php' Remote File Inclusion EDB-ID: 28967 CVE: 2006-5951 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/21003/info

Exophpdesk is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Exophpdesk version 1.2 is vulnerable.

http://www.example.com/Exophpdesk_PATH/pipe.php?lang_file=[Evil Script] URL: https://www.exploit-db.com/exploits/28967
标题: Bitweaver 1.x - '/fisheye/index.php?sort_mode' SQL Injection EDB-ID: 28963 CVE: 2006-6924 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20996/info
  
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
  
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
  
http://www.example.com/bitweaver/fisheye/index.php?sort_mode=-98 URL: https://www.exploit-db.com/exploits/28963
标题: Apple Mac OSX 10.x - FPathConf System Call Local Denial of Service EDB-ID: 28948 CVE: 2006-5836 类型: DOS 平台: OSX 发布日期: 2006-11-09 漏洞利用脚本: // source: https://www.securityfocus.com/bid/20982/info

Apple Mac OS X is prone to a local denial-of-service vulnerability because the kernel fails to properly handle the execution of a system call.

Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users.

#include <unistd.h>
#include <semaphore.h>

int main() {
fpathconf(sem_open("DaringWussball", O_CREAT, S_IRWXU, 1), 0);
} URL: https://www.exploit-db.com/exploits/28948
标题: Bitweaver 1.x - '/blogs/list_blogs.php?sort_mode' SQL Injection EDB-ID: 28953 CVE: 2006-6924 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20996/info

Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 

Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.

http://www.example.com/bitweaver/blogs/list_blogs.php?sort_mode=-98 URL: https://www.exploit-db.com/exploits/28953
标题: Bitweaver 1.x - '/fisheye/list_galleries.php?sort_mode' SQL Injection EDB-ID: 28954 CVE: 2006-6925 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20996/info
 
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
 
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
 
http://www.example.com/bitweaver/fisheye/list_galleries.php?sort_mode=-98 URL: https://www.exploit-db.com/exploits/28954
标题: LandShop 0.6.3 - 'ls.php' Multiple SQL Injections EDB-ID: 28951 CVE: 2006-5914 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20989/info
 
LandShop is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application, and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=[sql] 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=1&keyword=&search_area=[sql] http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=1&keyword=&search_area=&search_type=[sql] http://www.example.com/PATH/action/ls.phplang=en&action=list&start=20&CAT_ID=1&keyword=&search_area=&search_type=&search_order=[sql] 
http://www.example.com/PATH/action/ls.phpvariables =/PATH/action/ls.php?lang=en&action=list&CAT_ID=1&keyword=1&infield=[sql] URL: https://www.exploit-db.com/exploits/28951
标题: LandShop 0.6.3 - 'ls.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28950 CVE: 2006-5915 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20989/info

LandShop is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application, and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.

http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=1&keyword=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=1&keyword=&search_area=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=1&keyword=&search_area=&search_type=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=0&CAT_ID=1&keyword=&search_area=&search_type=&infield=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> 
http://www.example.com/PATH/action/ls.php?lang=en&action=list&start=20&CAT_ID=1&keyword=&search_area=&search_type=&search_order=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/28950
标题: bitweaver 1.x - '/newsletters/edition.php?tk' SQL Injection EDB-ID: 28949 CVE: 2006-6923 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20988/info

Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple HTML-injection issues and multiple SQL-injection issues. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Bitweaver 1.3.1 and prior versions are vulnerable to these issues.

http://www.example.com/newsletters/edition.php?tk=[SQL]&find=1&search=suchen URL: https://www.exploit-db.com/exploits/28949
标题: Kayako SupportSuite 3.0.32 - 'index.php' Cross-Site Scripting EDB-ID: 28939 CVE: 2006-5825 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/20954/info

Kayako SupportSuite is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

SupportSuite version 3.00.32 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/index.php?=[xss] URL: https://www.exploit-db.com/exploits/28939
标题: FreeWebShop 2.1/2.2 - 'index.php?cat' Cross-Site Scripting EDB-ID: 28943 CVE: 2006-5847 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/20969/info
 
FreeWebShop is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and a local file-include issue.
 
An attacker can exploit these issues to view files, execute local scripts, steal cookie-based authentication credentials, and launch other attacks.
 
FreeWebShop 2.2 and prior versions are vulnerable to these issues.

http://www.freewebshop.org/demo/index.php?page=browse&action=list&group=8&cat=[xss] URL: https://www.exploit-db.com/exploits/28943
标题: Immediacy .NET CMS 5.2 - 'Logon.aspx' Cross-Site Scripting EDB-ID: 28941 CVE: 2006-5853 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/20965/info

Immediacy CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 5.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com//logon.aspx?lang=<SCRIPT>alert('Can%20Cross%20Site%20Attack')</SCRIPT> URL: https://www.exploit-db.com/exploits/28941
标题: FreeWebShop 2.1/2.2 - 'index.php?page' Traversal Arbitrary File Access EDB-ID: 28942 CVE: 2006-5846 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/20969/info

FreeWebShop is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and a local file-include issue.

An attacker can exploit these issues to view files, execute local scripts, steal cookie-based authentication credentials, and launch other attacks.

FreeWebShop 2.2 and prior versions are vulnerable to these issues.

http://www.example.com/index.php?page=../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/28942
标题: AIOCP 1.3.x - 'cp_show_page_help.php' Full Path Disclosure EDB-ID: 28937 CVE: 2006-5832 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
                  
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
                  
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_show_page_help.php?hp[]= URL: https://www.exploit-db.com/exploits/28937
标题: AIOCP 1.3.x - 'cp_users_online.php' SQL Injection EDB-ID: 28932 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
             
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
             
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
             
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_users_online.php?order_field=cpsession_expiry&submitted=1&firstrow=[sql] URL: https://www.exploit-db.com/exploits/28932
标题: IPManager 2.3 - 'index.php' Cross-Site Scripting EDB-ID: 28938 CVE: 2006-5924 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/20952/info

IpManager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/?errno=1006&errmsg=%3Cscript%20language=javascript%3Ealert('xss')%3C/script%3E URL: https://www.exploit-db.com/exploits/28938
标题: AIOCP 1.3.x - 'cp_show_ec_products.php' Full Path Disclosure EDB-ID: 28936 CVE: 2006-5832 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
                 
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
                 
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_show_ec_products.php?order_field[]= URL: https://www.exploit-db.com/exploits/28936
标题: AIOCP 1.3.x - 'cp_links_search.php' SQL Injection EDB-ID: 28934 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
               
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
               
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
               
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_links_search.php?orderdir=[sql] URL: https://www.exploit-db.com/exploits/28934
标题: AIOCP 1.3.x - 'cp_login.php' SQL Injection EDB-ID: 28931 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
            
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
            
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
            
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_login.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28931
标题: AIOCP 1.3.x - 'cp_codice_fiscale.php' SQL Injection EDB-ID: 28933 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
              
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
              
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
              
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_codice_fiscale.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28933
标题: AIOCP 1.3.x - 'cp_contact_us.php' SQL Injection EDB-ID: 28929 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
          
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
          
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
          
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_contact_us.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28929
标题: AIOCP 1.3.x - 'cp_news.php' SQL Injection EDB-ID: 28924 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
      
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
      
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
      
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_news.php?choosed_language=[sql]
http://www.example.com/public/code/cp_news.php?news_category=[sql] URL: https://www.exploit-db.com/exploits/28924
标题: AIOCP 1.3.x - 'cp_links.php' SQL Injection EDB-ID: 28928 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
         
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
         
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
         
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_links.php?links_category=[sql]
http://www.example.com/public/code/cp_links.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28928
标题: AIOCP 1.3.x - 'cp_links_search.php' Cross-Site Scripting EDB-ID: 28921 CVE: 2006-5830 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
    
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
    
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_links_search.php?orderdir=</textarea>'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/28921
标题: AIOCP 1.3.x - 'cp_edit_user.php' SQL Injection EDB-ID: 28926 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
       
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
       
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_edit_user.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28926
标题: AIOCP 1.3.x - 'load_page' Remote File Inclusion EDB-ID: 28922 CVE: 2006-5831 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
    
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
    
AIOCP 1.3.007 and prior versions are vulnerable.

/admin/code/index.php?load_page=http%3A//google.com ( no login needed for the remote file include ) URL: https://www.exploit-db.com/exploits/28922